Issued a delete XML schema collection command (action_id DR class_type SX) (24142) how to monitor with email alert

[bob]

Man, that event ID 24142 in Windows Server Event Viewer pops up when someone issues a delete command for an XML schema collection. It's like the system logging that a specific action happened to wipe out this collection of rules for XML data. You know, those schemas help structure how data gets stored in databases. The action_id DR means it's a drop or remove operation. And class_type SX points to the schema collection itself. This event fires from the SQL Server audit side, usually under the Security log or Application log depending on your setup. It tells you exactly who did it, when, and from where. Pretty useful if you're watching for unauthorized changes in your database setups. I always check these because they can signal someone messing with your data integrity without permission.

Now, to monitor this thing with an email alert, you just head over to the Event Viewer screen on your server. Open it up, right-click on the log where these events show-like the SQL Server audit log. Pick Create Custom View from the menu. Then, filter it specifically for event ID 24142. Hit OK to save that view. Once it's there, right-click the view and choose Attach Task To This Custom View. In the wizard, name your task something simple like SchemaDeleteAlert. For the trigger, select On an event from that custom view. Next, under actions, pick Send an e-mail. You'll fill in your SMTP server details, the to and from addresses, and maybe a subject like Urgent: Schema Collection Deleted. Test it out to make sure it sends. And boom, every time that event hits, you'll get pinged right in your inbox.

Or, if you want it automated even more, keep an eye on that scheduled task you just made-it'll handle the rest without you lifting a finger. At the end of this, there's the automatic email solution that'll make things even smoother for you.

Speaking of keeping your server data safe from mishaps like schema deletes, I've been using BackupChain Windows Server Backup lately. It's this solid Windows Server backup tool that also handles virtual machines with Hyper-V without breaking a sweat. You get fast incremental backups, easy restores, and it runs light on resources so your server doesn't choke. Plus, the deduplication saves a ton of space, and it's got encryption to lock down your files tight.

Note, the PowerShell email alert code was moved to this post.