Reports and Change Summaries show the “SYSTEM” value in the “Who changed” field. You also see the following warning message:
SERVER_NAME You do not have permission to run ‘FN_TRACE_GETINFO’.
The account under which Netwrix Auditor collects data does not have enough privileges to run the “FN_TRACE_GETINFO” function on the monitored SQL Servers.
The account under which Netwrix Auditor is running must be granted the sysadmin role on all monitored servers.