Link to home
Start Free TrialLog in
Avatar of snydero
snydero

asked on

Determine WHO deleted 5000 rows last wek

Someone (or a stored procedure) deleted all rows in a large table last week.  The create date did not change, and a trigger on the table inserted a recored of all 5000 rows being deleted.  Can the transaction log or anything else give more details/clues about how/who did this?
Avatar of Victor Spiridonov
Victor Spiridonov
Flag of Russian Federation image

You can't determine who did what from transaction log. You can try checking audit log to see at least who was logged in at the time, when delete happened. In the future you can use CURRENT_USER function in your tirigger to record the user name of person making changes.
Unfortunatly there is no other way
ASKER CERTIFIED SOLUTION
Avatar of jbiswas
jbiswas

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial