We use transaction log shipping every 15 minutes plus database backups sent to a backup SQL server as part of our disaster recovery plan.
If I look in the transaction log backup file (using RESTORE HEADERONLY FROM DISK)-- I can see the transaction log backup for any 15 minute period.
At one point in the evening, the transaction log backup jumps from 20mb to 5 gb, then back down to 20mb the next 15 minutes.
I've checked all our maintenance plans and scheduled jobs. Nothing runs at that time.
I assume it is some user running a recurring job. How can I investigate this?
Is there any history over a 24hour period that shows transactions attributed to particular users?
Thanks in advance.