January 15, 2009 at 2:30 pm
Someone from the team has manipulated the table and the person logged in using windows authetication. please suggest how the information can be recovered who updated a particular table in data base.
January 15, 2009 at 2:36 pm
It depends on a number of things.
Is the database in full recovery mode, and do you have a product that can parse the transaction log?
or
Do you have any sort of auditing on the table?
or
Do you have a T-SQL type trace running on the database?
If the answer to all of these is "no", then I'd say the only way to get the data you need is to ask everyone would could have done it, and the person who says "yes" is the one.
If you have one, or more, of these, then you can get the data from the transaction log/audit trail/trace.
- Gus "GSquared", RSVP, OODA, MAP, NMVP, FAQ, SAT, SQL, DNA, RNA, UOI, IOU, AM, PM, AD, BC, BCE, USA, UN, CF, ROFL, LOL, ETC
Property of The Thread
"Nobody knows the age of the human race, but everyone agrees it's old enough to know better." - Anon
January 15, 2009 at 3:03 pm
We dont have any product for parsing the transaction logs. We also dont have any audit or trace running on sql server. The issue is some one has delete the records from table to hide his mistake.
We have a version table which stores history about what script version was executed.
Could you please suggest me a product which can do the same?
cheers
Siddarth
January 15, 2009 at 4:00 pm
Does this return anything?
SELECT * FROM ::fn_trace_getinfo(0)
If this shows something... then you have a trace running... and there is hope to find out what u are looking for.
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply