Database is in full recovery mode. Transaction log backups are taken on every hour and Full backup nightly at 02:10.
I need to recover an SQL Server 2008 R2 database to a point in time but I am unfortunately unsure to what the point in time is? How should I restore when I am uncertain when the delete occurred?
A user deleted all rows from an important table. I must restore from backups to the point in time just before the delete was done. The issue wasn't discovered before the next day and querying the table indicates that the last inserts after the delete, was around 15:10. Looking at the size of the transaction log backups it looks like the delete was somewhere between 13:00-15:15. At least the transaction log backups at 14:00 and 15:00 were way above normal size. Specially the one that was taken at 15:00.
What should be my recovery strategy here?
Records have been added to the database and I need to keep the database online.
Is it possible to restore in steps to see where the delete occurred and then once the delete comes in I rollback that action? What is best approach here?
Attached is what I have been thinking of but not sure about the last steps.
What are the best plans of actions here?? Restore-sample.txt