October 3, 2011 at 4:07 am
Hi all,
Ive just been asked if i can find out who deleted a record in a table. We are in full recovery mode but use DPM 2010 for backups. It does full backups daily and log backups every 2 hours.
Auditing is off, which is how i was thinking it should be done.
As the info would be in the log file is there an easy way to find out from log files? or another way?
Thanks for any help
S
October 3, 2011 at 4:35 am
Nope , you would of had to of put any logging in place before the event occured.
SQLServer does not keep track of this by default.
October 3, 2011 at 4:53 am
hi Dave,
Thanks for the quick reply! feared that might be the answer..
thank you for the help.
ps
good luck with the meeting tonight. I will be trying to get your next one 🙂
S
October 3, 2011 at 7:05 am
Thx, shame you cant make it, keep an ear out for the next one
October 3, 2011 at 7:05 am
Hi,
You need to auditing the table by writing triggers.
From the above process,you can find who deleted the table data in the audit table.
Thanks
Kumar
SQLdbataskwithkumar
Regards,
Kumar
October 4, 2011 at 2:59 pm
Do you have a profiler trace running?
______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience
Viewing 6 posts - 1 through 5 (of 5 total)
You must be logged in to reply to this topic. Login to reply