Solved

Determine WHO deleted 5000 rows last wek

Posted on 1998-04-07
3
260 Views
Last Modified: 2012-06-21
Someone (or a stored procedure) deleted all rows in a large table last week.  The create date did not change, and a trigger on the table inserted a recored of all 5000 rows being deleted.  Can the transaction log or anything else give more details/clues about how/who did this?
0
Comment
Question by:snydero
  • 2
3 Comments
 
LVL 7

Expert Comment

by:spiridonov
Comment Utility
You can't determine who did what from transaction log. You can try checking audit log to see at least who was logged in at the time, when delete happened. In the future you can use CURRENT_USER function in your tirigger to record the user name of person making changes.
0
 
LVL 7

Expert Comment

by:spiridonov
Comment Utility
Unfortunatly there is no other way
0
 
LVL 2

Accepted Solution

by:
jbiswas earned 100 total points
Comment Utility
There is no way to find this out, not even from the transaction log unless you have Microsoft look at it and they decrypt the info in the transaction log(which I doubt they will). They do have a way to decrypt the transaction log but like all other vendors they give noone the code to decrypt the tran log. This is a black box and noone with any sanity will give you a way to do this. However obviously the internal architechture can read this tran log, else how would they do replication from one server to another(Microsoft's replication schema is transaction based). However if you knew when the table got dropped, you could replay the transaction log till that point of time and recover from that disaster.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Join & Write a Comment

Suggested Solutions

Everyone has problem when going to load data into Data warehouse (EDW). They all need to confirm that data quality is good but they don't no how to proceed. Microsoft has provided new task within SSIS 2008 called "Data Profiler Task". It solve th…
Ever wondered why sometimes your SQL Server is slow or unresponsive with connections spiking up but by the time you go in, all is well? The following article will show you how to install and configure a SQL job that will send you email alerts includ…
Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.
Via a live example, show how to extract information from SQL Server on Database, Connection and Server properties

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now