An event occurred in which the service of SQLserver (2017) suddenly stopped.
Could you please let me know from what point of view the investigation is necessary?
Here's what I know about the situation:
・There is no problem with the server or other applications.
・Every day, the SQLserver service is stopped in batches (19:30). However, when the event occurred, the service suddenly stopped around 17:00 even though the batch was not started.
Regarding the error log, the difference between normal and this time is as follows.
・Normal
(1844:BC8) 04/27/23 19:30:08, ACTION, sqlservr.exe, Send_To_Watson flag is set to true
(1844:BC8) 04/27/23 19:30:08, ACTION, sqlservr.exe, Watson Invoke: Yes
(1844:BC8) 04/27/23 19:30:08, ACTION, sqlservr.exe, Creating WER report...
(1844:BC8) 04/27/23 19:30:08, ACTION, sqlservr.exe, Created the report.
(1844:BC8) 04/27/23 19:30:08, ACTION, sqlservr.exe, WerReportAddFile Mini Dump succeeded.
(1844:BC8) 04/27/23 19:30:08, ACTION, sqlservr.exe, WerReportAddFile SQLDumpFile succeeded.
(1844:BC8) 04/27/23 19:30:08, ACTION, sqlservr.exe, WerReportAddFile Log Tail File succeeded.
(1844:BC8) 04/27/23 19:30:08, ACTION, sqlservr.exe, Submitted report asynchronously.
(1F90:F5C) 04/27/23 19:30:08, ACTION, sqlservr.exe, Send_To_Watson flag is set to true
(1F90:F5C) 04/27/23 19:30:08, ACTION, sqlservr.exe, Watson Invoke: Yes
(1F90:F5C) 04/27/23 19:30:08, ACTION, sqlservr.exe, Creating WER report...
(1F90:F5C) 04/27/23 19:30:08, ACTION, sqlservr.exe, Created the report.
(1F90:F5C) 04/27/23 19:30:08, ACTION, sqlservr.exe, WerReportAddFile Mini Dump succeeded.
(1F90:F5C) 04/27/23 19:30:08, ACTION, sqlservr.exe, WerReportAddFile SQLDumpFile succeeded.
(1F90:F5C) 04/27/23 19:30:08, ACTION, sqlservr.exe, WerReportAddFile Log Tail File succeeded.
(1F90:F5C) 04/27/23 19:30:08, ACTION, sqlservr.exe, Submitted report asynchronously.
・Abnormal
(17E4:4A4) 04/28/23 17:03:57, ACTION, sqlservr.exe, Watson Invoke: No
(270C:206C) 04/28/23 17:03:58, ACTION, sqlservr.exe, Watson Invoke: No