Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
AskSQLTeam
Ask SQLTeam Question
0 Posts |
 Posted - 2002-04-26 : 11:03:23
|
| Sissi writes "Hi, this is very urgent..One of our tables has been deleted.I would like first to see if there is a way to find outwho did that? and also to see what are the activities going onin our Database?Please get back to me ASAP. This is urgent.Thanks." |
|
|
KnooKie
Aged Yak Warrior
623 Posts |
Posted - 2002-04-26 : 11:16:22
|
| I don't think you can find out who deleted it unless you created tables that specifically recorded that sort of info. which you would have had to create and manage.You can use the activity monitor to view who is doing what on whichever database. In SQL7 this can be found in the management > current activity folder.Paul |
 |
|
|
Page47
Master Smack Fu Yak Hacker
2878 Posts |
Posted - 2002-04-26 : 11:49:34
|
quote:
I would like first to see if there is a way to find outwho did that?
Go ask those who have applicable permissions. Then set up an audit scheme, using a server-side trace, that captures ddl statements and inserts them into a table. You can query you audit table next time you want to answer that question.quote:
and also to see what are the activities going on in our Database?
There are a couple ways to do this: sp_who combined with dbcc inputbuffer(spid), profiler, or asking those with permissions what they are doing.quote:
Please get back to me ASAP. This is urgent.
I guess, based on the nature and tone of your question, that you are in a heap of trouble . . . however, this is not the best way to ask for free help from complete strangers.<O> |
|
|
|
VyasKN
SQL Server MVP & SQLTeam MVY
313 Posts |
Posted - 2002-04-26 : 11:52:51
|
| You can't really find out who deleted it after the fact, unless you have some kind of tracking/auditing mechanism in place.You can try Log Explorer from lumigent.com to see who deleted the table/data and probably recover it. I hope you do have a recent good backup.You can watch current activity using sp_who and also using the tool Profiler.--HTH,VyasCheck out my SQL Server site @http://vyaskn.tripod.com |
|
|
|
sissi
Starting Member
20 Posts |
Posted - 2002-04-30 : 14:35:54
|
Thanks very much everyone for all your inputs. I managed to recuperatethe table and am looking into Table auditing, etc.quote:
You can't really find out who deleted it after the fact, unless you have some kind of tracking/auditing mechanism in place.You can try Log Explorer from lumigent.com to see who deleted the table/data and probably recover it. I hope you do have a recent good backup.You can watch current activity using sp_who and also using the tool Profiler.--HTH,VyasCheck out my SQL Server site @http://vyaskn.tripod.com
|
|
|
|
|
|
|
|
|
URGENT- HOW CAN I FIND OUT ABOUT DB ACTIVITY