April 19, 2010 at 11:32 am
I don't think there is an easy way, but, we had a major table completely emptied(i.e. delete or truncated) and we are not sure when or who did this. Is there a way to view the log to look for mass deletes?
April 19, 2010 at 12:44 pm
You would need to pick up a third party log explorer tool. There's no way to do this with native SQL Server tools.
----------------------------------------------------The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood... Theodore RooseveltThe Scary DBAAuthor of: SQL Server 2017 Query Performance Tuning, 5th Edition and SQL Server Execution Plans, 3rd EditionProduct Evangelist for Red Gate Software
April 19, 2010 at 1:13 pm
If this is Sql Server 2005, there will be default trace running.You might find more information there.
April 19, 2010 at 1:20 pm
The default trace doesn't capture DML. I learned that one the hard way.
----------------------------------------------------The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood... Theodore RooseveltThe Scary DBAAuthor of: SQL Server 2017 Query Performance Tuning, 5th Edition and SQL Server Execution Plans, 3rd EditionProduct Evangelist for Red Gate Software
April 19, 2010 at 2:09 pm
You might be able to find out when it happened using the fn_dblog function.
SELECT [transaction id],[begin time],[spid],[allocunitname],[operation]
FROM fn_dblog(NULL,NULL)
--WHERE operation='LOP_DELETE_ROWS'
--WHERE [transaction id]='0000:00027a0a'
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply