April 21, 2011 at 2:58 am
Hi,
Background:
We have an app built on a SQL server database with a web interface front end. The front end run with ASP and makes the connection to the SQL db updating any changes made. The updates the db occurs daily, evenings. All the entries made on the front end is made to tables /fields in the actual database and references those fields /tables
Problem:
It would appear that in the last while, information that's been entered seems to go "POOF"! Then, a few days later its back again! WOW!
QUESTION:
Is there a way that the entries are MANUALLY removed without there being a trace and/or audit log? Currently the login is a global one and I don't know if the front end makes the connection to the DB using that global login details?
Can anyone assist?
Thank you
April 21, 2011 at 3:05 am
If you setup "correctly" a trace you cant modify data without if not being logged.
April 21, 2011 at 3:55 am
assuming you sql server is configured kinda out of the box. There will be only only a default trace. that default trace does not log inserts/deletes ect only for example on a higher level the altering of an object.
So to be able to see the exact what happens you need to setup a more detailed trace. to catch the delete action.
back to youre question.
if the person who is manipulating you re data will default not be logged in a trace by default.
youre dba'er could setup a trace and catch it
But the funny part is that after a few days its back again....
I would recommend that you contact youre dbaer either setup a trace and maybe restore some backups in a test envoriment to check if the data was really there... then at some point was gone... and then was at 3rd point back.
This sounds spooky
April 21, 2011 at 4:46 am
Hey man....spooky is a freakin understatement. If only I can catch this !@#@!! Someone is trying to frame me...and without any proof from me ....it seems to be working
E.g. I entered information yesterday, took screendump and today its gone... POOF!
April 26, 2011 at 7:02 pm
i don't know if this will help but just try this..its there a way that you could check your EVENT VIEWER (check if there are any errors pertaining to your SQL..maybe there is something affecting your db..also observe and record your windows log and try to check also maybe they have already got into your server..
gudluck..
April 28, 2011 at 3:43 am
Hi,
Thanks for feedback but I dont have access to the server that the SQL db resides on to see the event logs... 🙁
...I thought of that already. I need to get info without arousing any suspicion of what I'm up to.
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply