locked
who deleted data from tables RRS feed

  • Question

  • Hi ALL,

                 How to find who deleted records from table

    TIA

    Monday, September 27, 2010 8:59 PM

All replies

  • Unless you have some mechanism already inplace you wont be able to find it out now.
    You might have to use any of these

    * SQL Audit server and database specification
    * CDC
    * Change tracking


    Thanks, Leks
    Monday, September 27, 2010 9:03 PM
  • Kashif412,

     By default records deleted on a table or not audited. You should have some audit mechanism inplace as adviced by Lekss.


    Sivaprasad S http://sivasql.blogspot.com Please click the Mark as Answer button if a post solves your problem!
    Tuesday, September 28, 2010 12:23 AM
  • Perhaps that tool can help you find out

    http://www.lumigent.com/ ---exploer log for sql


    Best Regards, Uri Dimant SQL Server MVP http://dimantdatabasesolutions.blogspot.com/ http://sqlblog.com/blogs/uri_dimant/
    Tuesday, September 28, 2010 9:11 AM
  • Hi Lekss,

     

    I don’t think CDC could provide the information about who has modified the data.

    Please refer to this link to get more information about what information could be returned by CDC: http://msdn.microsoft.com/en-us/library/bb500305.aspx

    From the link above, we could know that CDC could only return the information about when and how the data is modified.

     

    Besides, the Audit only exists in SQL Server 2008 and later version.

     

    If anything is unclear, please let me know.


    Regards,
    Tom Li
    Friday, October 1, 2010 8:40 AM
  • I believe you have all Transaction log with you.

    you can copy all tranasction log to your test server and user the Redgate software. This will help you to read the commands executed and logged into the transaction log files.

    www.red-gate.com

     


    Please Vote & "Mark As Answer" if this post is helpful to you. Cheers Prakash Nandwana Bangalore , India
    Friday, October 1, 2010 1:47 PM
  • If the database is in SIMPLE recovery and the delete happened more than a few minutes ago, the information may no longer be in the log.

    Please always tell us what version you are using.

    The Red-Gate product has this note on the website:

    Please note that SQL Log Rescue does not support 64-bit versions of SQL Server or SQL Server versions other than SQL Server 2000.


    HTH, Kalen Delaney www.SQLServerInternals.com
    Friday, October 1, 2010 1:58 PM