<div>
<blockquote>
We have nightly full backups scheduled set to truncate the log file.
</blockquote>
The full backup don't truncate the log. Transaction log backup does. Are you running regular transaction log backups on the database (once by hour or two hours at least)?<br />
<br />

<blockquote>
Out of need we have had to change the DB to simple recovery mode and then shrink the log file. &nbsp;I believe this makes us vulnerable to only being able to perform a restore to the last full backup. &nbsp;Is this correct?
</blockquote>
By your comments it's like that you are only have set full backups. If that's true you don't need to have the database with full recovery model set.<br />
<br />

<blockquote>
I understand the log file must be expanding in response to one or more queries causing it.
</blockquote>
Not only queries. Any operation that handles with a large amount of data can make the database log grows. Also operations as reindex can do it.
</div>


<div>
This looks like a great first step for us; thanks.<br />
<br />
Is there a way to, when a spike is detected, output a list of active transactions? &nbsp;It would be ideal if this could be logged along with details on how much resource they are consuming.
</div>


<div>
There are some monitor tools that can do that. I like SCOM from Microsoft but there are others.
</div>


<div>
With full recovery mode every change in the data is written in the log. <br />
Wich enables you to fully recover the database with the log and the last backup.<br />
You can even revert to time in points in case you executed a wrong command and wrongfully changed a lot of data.<br />
Only query's with inserts and updates the log will grow not with select.<br />
<br />
In simple recovery mode no changes to the database are logged.<br />
So the log will never grow. You have only your backup to recover the data.<br />
<br />
IMHO: Unless you want to protect yourself against database file corruption or loss (in this case you need the put the log on a separate storage) or a wrongfully massive data changes, &nbsp;i suggest you set all your databases to simple recovery mode.
</div>


<div>
<blockquote>
IMHO: Unless you want to protect yourself against database file corruption or loss (in this case you need the put the log on a separate storage) or a wrongfully massive data changes, &nbsp;i suggest you set all your databases to simple recovery mode. 
</blockquote>
I can't agree with this statement.<br />
What does you chose from a full or simple recovery model is the business demand. It's ok for the business to loose a day of work? An hour? Or not even a minute? With full recovery model and a proper backup plan you can restore a database to any point of time. Any, means to a exact millisecond of the day.
</div>


<div>
Following Vitor's statement that reindex also uses log space I see we do a nightly rebuild of all the indices in all DBs on the server via the following:<br />
<br />
ALTER INDEX ALL ON ' + @Table + ' REBUILD WITH (FILLFACTOR = ' + CONVERT(VARCHAR(3),90) + ')' <br />
<br />
Could this cause the log file to expand dramatically? &nbsp;If so is there away to alter the statement to not impact the size of the log file?
</div>


<div>
REBUILD option is a little bit drastic. You should use it only if a fragmentation level greater that 30% occurs. Otherwise use REORGANIZE option. It will still use the transaction log but with minimal log. You can add a transaction log backup after a reindex.<br />
<br />
Alternative you can change the recovery model to &nbsp;<a href="http://msdn.microsoft.com/en-us/library/ms190692.aspx" rel="ugc">bulk-logged</a>.
</div>


<div>
Thanks you Vitor. &nbsp;<br />
<br />
So just to identify if this is the problem, would the rebuild significantly impact the log size of a large db?<br />
<br />
Related to your 30% statement, is there a way to test an index to see if is &gt;= 30$ and rebuild/reorganize as appropriate?
</div>


<div>
Also is it normal practice to reorganize nightly?
</div>


<div>
Thanks very much for the help to all you guys!
</div>


<div>
<div class="content wysiwyg-content">
We have a SQL 2008 database which is in full recovery mode. &nbsp;Regularly (at least once a week) the log grows to several times the database size. &nbsp;We have nightly full backups scheduled set to truncate the log file.<br />
<br />
Out of need we have had to change the DB to simple recovery mode and then shrink the log file. &nbsp;I believe this makes us vulnerable to only being able to perform a restore to the last full backup. &nbsp;Is this correct?<br />
<br />
I understand the log file must be expanding in response to one or more queries causing it. &nbsp;How can I determine what queries are causing this in an effort to have them optimized and/or removed?
</div>
</div>


We have a SQL 2008 database which is in full recovery mode.  Regularly (at least once a week) the log grows to several times the database size.  We have nightly full backups scheduled set to truncate the log file.

Out of need we have had to change the DB to simple recovery mode and then shrink the log file.  I believe this makes us vulnerable to only being able to perform a restore to the last full backup.  Is this correct?

I understand the log file must be expanding in response to one or more queries causing it.  How can I determine what queries are causing this in an effort to have them optimized and/or removed?

SQL 2008 DB Log file huge - how to determine what is causing this?

Microsoft SQL Server 2008 is a suite of relational database management system (RDBMS) products providing multi-user database access functionality.Component services include integration (SSIS), reporting (SSRS), analysis (SSAS), data quality, master data, T-SQL and performance tuning. Major improvements include the  Always On technologies and support for unstructured data types.

Microsoft SQL Server 2008

Microsoft SQL Server is a suite of relational database management system (RDBMS) products providing multi-user database access functionality.SQL Server is available in multiple versions, typically identified by release year, and versions are subdivided into editions to distinguish between product functionality. Component services include integration (SSIS), reporting (SSRS), analysis (SSAS), data quality, master data, T-SQL and performance tuning.