May 16, 2003 at 9:15 am
We have ppl that tampered with the db and deleted records from the DB. We have the trans log but how dow I view or have tool to be able to look into the trans log to see who and what were being done? thanks for your help..
May 16, 2003 at 10:18 am
you can view the transaction log with a third party tool call Log Explorer.
You can check it at http://www.lumigent.com
But you can also trace your server to check all the transactions that are executing. You can use Profiler that comes with SQL Server.
May 16, 2003 at 10:30 am
I were looking at Lumigent Eval bcz company won't buy anything. Well the tampering was done and the db was restored. Security is now tighter but still figuring out who DID IT and was hoping for something free. 😀
May 16, 2003 at 2:15 pm
Hard to find good AND free. Log Explorer worth money. Start asking now, might get in next years budget.
Andy
May 16, 2003 at 2:38 pm
I will say just to teach you how to understand to read the Log file with just the basic SQL Tools is a pain but could be done. LogExplorer is on the market and considering all it does a good price, but you might also check out Log Navigator http://www.lockwoodtech.com/index_lognavigator.htm, which is currently in pre-beta, when it becomes available for testing. I have also started the groudwork for an app myself but so I can see it will be bit to get where I want it.
May 16, 2003 at 3:43 pm
Thanks for the advice. Unforunately our company had freezed all new software purchase and new projects for a while. Just have to do with free and ask around.. 🙂
May 17, 2003 at 2:59 pm
If you need just temporarily try a trial of LogExplorer. It is good for 30 days and may meet your needs in that timeframe.
May 17, 2003 at 7:14 pm
LockwoodTech Software also has a log explorer type product in the works. It'll probably be cheaper than Log Explorer. When the money becomes unfrozen, it, too, may be an option.
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1
K. Brian Kelley
@kbriankelley
May 19, 2003 at 9:48 am
The following undocumented command will do the trick.
DBCC log ( {dbid|dbname}, [, type={0|1|2|3|4}] )
PARAMETERS:
Dbid or dbname - Enter either the dbid or the name of the database
in question.
type - is the type of output:
0 - minimum information (operation, context, transaction id)
1 - more information (plus flags, tags, row length)
2 - very detailed information (plus object name, index name,
page id, slot id)
3 - full information about each operation
4 - full information about each operation plus hexadecimal dump
of the current transaction log's row.
by default type = 0
May 19, 2003 at 10:55 am
Ah-ha. Use it all the time. However it isn't a simple look and understand process.
Also, the is an undocumented -1 option in the type place as well.
Don't think it will be worth his time without fulling understanding every statement and field there is in the output.
May 19, 2003 at 2:41 pm
LogExplorer is good but with the eval version, only the pubs and northwind log is viewable. It looks like a great software but mula is a problem here and with most company. I also tried to download the LogNavigator by Lockwood but it's still in pre-beta and can't be download. I am going through the DBCC log command and still wondering what's all the infos coming back. Still greatful for all the infos.. 😉
May 19, 2003 at 2:59 pm
Undocumented DBCC commands are in an article by Alex Chigrik:
http://www.mssqlcity.com/Articles/Undoc/SQL2000UndocDBCC.htm
It includes the -1 flag for DBCC LOG() but doesn't detail anything more than what you've already seen here.
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1
K. Brian Kelley
@kbriankelley
Viewing 12 posts - 1 through 11 (of 11 total)
You must be logged in to reply to this topic. Login to reply