Thom and Andrew , yes i am also capturing the host_name as well, sorry i forgot to mention it in my question initially. I know the machine from the host...

Unfortunately all the applications are using the same user in windows authentication mode.

Thanks Gail for suggestion. I will start a new thread.

Thanks
Vipin

Sharon i am also facing the same problem in the same manner. The data is deleted from database but i am not able to identify the process or application which...