Delete table, who did it?

Question

Delete table, who did it?

Krasavita

SSC-Insane

Points: 23138
More actions
April 24, 2009 at 2:38 pm

#71506

How can I found out, when table was deleted and by who

Viewing 9 posts - 1 through 8 (of 8 total)

You must be logged in to reply to this topic. Login to reply

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 1

Unless you had a trace active, no way to tell.

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Ken Simmons SSCertifiable Points: 7822 More actions · Answer 2

You may be able to use a third party transaction log reader to track it down. I have used Apex Log Reader in the past to find out who did something in a similar situation.

http://www.apexsql.com/sql_tools_log.asp

WayneS SSC Guru Points: 95461 More actions · Answer 3

GilaMonster (4/24/2009)
Unless you had a trace active, no way to tell.

or a DLL trigger?

Wayne
Microsoft Certified Master: SQL Server 2008
Author - SQL Server T-SQL Recipes

If you can't explain to another person how the code that you're copying from the internet works, then DON'T USE IT on a production system! After all, you will be the one supporting it!

Links:
For better assistance in answering your questions
Performance Problems
Common date/time routines
Understanding and Using APPLY Part 1 & Part 2

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 4

WayneS (4/24/2009)
GilaMonster (4/24/2009)
Unless you had a trace active, no way to tell.
or a DLL trigger?

SQL 2000

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 5

Ken Simmons (4/24/2009)
You may be able to use a third party transaction log reader to track it down. I have used Apex Log Reader in the past to find out who did something in a similar situation.

Can that read log backups or just the active portion of the log?

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

WayneS SSC Guru Points: 95461 More actions · Answer 6

GilaMonster (4/25/2009)
WayneS (4/24/2009)
GilaMonster (4/24/2009)
Unless you had a trace active, no way to tell.
or a DLL trigger?
SQL 2000

Ok, I didn't see that before.

Wayne
Microsoft Certified Master: SQL Server 2008
Author - SQL Server T-SQL Recipes

If you can't explain to another person how the code that you're copying from the internet works, then DON'T USE IT on a production system! After all, you will be the one supporting it!

Links:
For better assistance in answering your questions
Performance Problems
Common date/time routines
Understanding and Using APPLY Part 1 & Part 2

Ken Simmons SSCertifiable Points: 7822 More actions · Answer 7

GilaMonster (4/25/2009)
Ken Simmons (4/24/2009)
You may be able to use a third party transaction log reader to track it down. I have used Apex Log Reader in the past to find out who did something in a similar situation.
Can that read log backups or just the active portion of the log?

ApexSQL Log reads the following forms of the transaction log:

Online transaction Log

Detached transaction Log

Transaction Log backup

Redgate has a free version for SQL 2000. I am not sure what all it can do, but since it is free, it couldn't hurt to try it.

http://www.red-gate.com/products/SQL_Log_Rescue/index.htm

Mohit K. Gupta SSChampion Points: 12130 More actions · Answer 8

It can read from the log but to find out who executed a command it keeps track of commands executed in MSDB on the server in question. If you didn't have the APEX tools setup when delete happened you will be able to find out when it happened but not by whom...

I haven't used it for a bit... I was a little annoyed because the tool needs to be activated per server; and it installed tracing components on servers. I knew it installs some components but I did not know those components were for logging who is executing what.

Just be careful you have to monitor the MSDB on your server if you use the tools...

Thanks.

Mohit.

[font="Arial"]---

Mohit K. Gupta, MCITP: Database Administrator (2005), My Blog, Twitter: @SQLCAN[/url].
Microsoft FTE - SQL Server PFE

* Some time its the search that counts, not the finding...
* I didn't think so, but if I was wrong, I was wrong. I'd rather do something, and make a mistake than be frightened and be doing nothing. :smooooth:[/font]

How to ask for help .. Read Best Practices here[/url].