How to Find Who Deleted a Record

  • Hi all,

    Ive just been asked if i can find out who deleted a record in a table. We are in full recovery mode but use DPM 2010 for backups. It does full backups daily and log backups every 2 hours.

    Auditing is off, which is how i was thinking it should be done.

    As the info would be in the log file is there an easy way to find out from log files? or another way?

    Thanks for any help

    S

  • Nope , you would of had to of put any logging in place before the event occured.

    SQLServer does not keep track of this by default.



    Clear Sky SQL
    My Blog[/url]

  • hi Dave,

    Thanks for the quick reply! feared that might be the answer..

    thank you for the help.

    ps

    good luck with the meeting tonight. I will be trying to get your next one 🙂

    S

  • Thx, shame you cant make it, keep an ear out for the next one



    Clear Sky SQL
    My Blog[/url]

  • Hi,

    You need to auditing the table by writing triggers.

    From the above process,you can find who deleted the table data in the audit table.

    Thanks

    Kumar

    SQLdbataskwithkumar

    Regards,
    Kumar

  • Do you have a profiler trace running?

    ______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply