check user log file | SQL Server Performance Forums

SQL Server Performance Forum – Threads Archive

check user log file

Hi, I has found some of my record has been delete from the table, now i need to trace back which user login id has been done the delete command, so where i can get those user log file ? Thank you
Transaction log file (.LDF) file is the one where you can view the database activities, but there is no easy way from SQL side to read it so. You need to use third party tools likehttp://www.lumigent.com ‘s log explorer or APex-SQL’s log reader, check under tools section in this website for more information on these 2 tools.
Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
If only what you need is who delete some rows, you can use Profiler with Ntusername and loginName columns. After trace, you can search for delete, and find who did it.
I know is a lot of work and some delete will Ok, but is for free.
Luis Martin
Moderator
SQL-Server-Performance.com All postings are provided “AS IS” with no warranties for accuracy.
Luis If the delete was already performed then there will be no use of PROFILER, for the future assesment this may help but cumbersome to setup and should be alert for the space issues for the trace generated by the profiler. Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
True. 3rd parts logs tools, are the best. The question is: I’m looking for someone who delete rows no by application? (Because if is by application, there is other problem about who have permission or application does not have audit section).
In short if you need all funtions to management log, agree with you, but if is an casual case, why not to run profiler 7×24 for some time?.
May be my point of view is because $500 is to much money here.
Luis Martin
Moderator
SQL-Server-Performance.com All postings are provided “AS IS” with no warranties for accuracy.
$$$ are always a constraint in terms of management’s policy. I believe its MS strategy to grant a lead to other companies for development of such tools. But on the technical terms running PROFILER or trace using scrpt 24×7 is not a good practice, as it will generate the amount of trace and SQL resources are stress if the server is already having locking, performance issues. For a moment of time I agree to schedule the trace acitivity in order to findout the cause of the activities. Its a good tool, but should be used carefully.
Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
Why not just CREATE TRIGGER FOR DELETE?
I believe GuyDuncan has got valuable suggestion in order to accomplish the task,http://www.devx.com/dbzone/Article/7939/1954?pf=true for more information.
Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
]]>