May 29, 2008 at 7:11 am
Hi Experts,
Is there any way to know about a database which is deleted from the server.Am i such a situation that somebody have deleted the database which was present yesterday.
Please help
TIA
May 29, 2008 at 7:18 am
Do you have backups? If not, I believe you may be out of luck. There are some third party tools that can retrieve deleted files from disk but I don't know if this would help (worth a shot?) as it was probably done within SQL and not at an OS level.
There are others as well, google it.
-- You can't be late until you show up.
May 29, 2008 at 7:24 am
if you want to see how/who deleted the database, there is a related conversation here -
http://www.sqlservercentral.com/Forums/Topic474543-146-1.aspx
May 29, 2008 at 7:24 am
Ratheesh.K.Nair (5/29/2008)
Hi Experts,Is there any way to know about a database which is deleted from the server.Am i such a situation that somebody have deleted the database which was present yesterday.
Please help
TIA
Not to get your hopes too high up, but is it possible the database was just detached?
Check whether the database files are still on disk.
__________________________________________________________________________________
SQL Server 2016 Columnstore Index Enhancements - System Views for Disk-Based Tables[/url]
Persisting SQL Server Index-Usage Statistics with MERGE[/url]
Turbocharge Your Database Maintenance With Service Broker: Part 2[/url]
May 29, 2008 at 7:37 am
I have error log ..Is that helpful.Can i find who deleted the database and when???
May 29, 2008 at 7:42 am
Ratheesh.K.Nair (5/29/2008)
I have error log ..Is that helpful.Can i find who deleted the database and when???
Start with who currently has db_owner/sysadmin permissions.
Hopefully not too many people...
__________________________________________________________________________________
SQL Server 2016 Columnstore Index Enhancements - System Views for Disk-Based Tables[/url]
Persisting SQL Server Index-Usage Statistics with MERGE[/url]
Turbocharge Your Database Maintenance With Service Broker: Part 2[/url]
May 29, 2008 at 10:29 am
If you drop a database it is captured in the default trace.
Look in the trc - files that are located in the same directory as the error logs.
Ola Hallengren
May 29, 2008 at 10:33 am
Ola Hallengren (5/29/2008)
If you drop a database it is captured in the default trace.Look in the trc - files that are located in the same directory as the error logs.
Ola Hallengren
Good to know, thank you!
__________________________________________________________________________________
SQL Server 2016 Columnstore Index Enhancements - System Views for Disk-Based Tables[/url]
Persisting SQL Server Index-Usage Statistics with MERGE[/url]
Turbocharge Your Database Maintenance With Service Broker: Part 2[/url]
May 29, 2008 at 1:54 pm
SQL 2005 has report feature and you could be able to find out who has deleted. As above mentioned you can also check it who has SA permission on the server.
If you have Third party tools like Litespeed, it might be possible that you unremove the Database.
MCP, MCTS (GDBA/EDA)
May 29, 2008 at 2:04 pm
>SQL 2005 has report feature and you could be able to find out who has deleted.
This report is using the default trace as I understand it. It's good that Microsoft has made these reports.
Ola Hallengren
May 29, 2008 at 2:20 pm
Bear in mind, that the default trace rolls over at 20MB. It's quite possible that there has been enough activity that the information has 'aged out' of the default (5) trace files...
Your friendly High-Tech Janitor... 🙂
May 30, 2008 at 12:20 am
I checked the error logs but find only that particular database started. Searched for the word 'Delete' 'Drop' but no use...
May 30, 2008 at 4:10 am
Do you actually have permissions to see ALL the databases on the servers? It could be, if you're not using a SysAdmin account, that you just can't see it, but the db is there.
That's my thought if you can see that the database was started but can't see any place where it was dropped or deleted.
May 30, 2008 at 6:50 am
Brandie Tarvin (5/30/2008)
Do you actually have permissions to see ALL the databases on the servers? It could be, if you're not using a SysAdmin account, that you just can't see it, but the db is there.That's my thought if you can see that the database was started but can't see any place where it was dropped or deleted.
That's what I love about this place. I didn't even think of that point of view!
Also, did you do as Marios suggested, check to see if your .mdf/.ldf files are still on disk? If your lucky, either Brandie or Marios may be correct.
-- You can't be late until you show up.
May 30, 2008 at 7:18 am
Perfact Terry, We did not think about this minor things. Check would you have SA permission on it or not? Check the mdf and Ldf file for the deleted DB(which you assumed). Check for the windows event viewer.
I do not think that you should be able to find out all the transcations or SQL statments(Queries)from past one day or more days.
If you have the monitoring tool then only it would be possible that you could find out much more.
MCP, MCTS (GDBA/EDA)
Viewing 15 posts - 1 through 15 (of 18 total)
You must be logged in to reply to this topic. Login to reply