Home » RDBMS Server » Server Administration » How to find which user has deleted teh data in the table
How to find which user has deleted teh data in the table [message #302896] Wed, 27 February 2008 05:09 Go to next message
it_me24
Messages: 167
Registered: March 2006
Location: delhi
Senior Member
Hi Everybody,

it seems some of the data has been deleted from one of our table.
now i have been assigned a job to find which user has deleted the data and what time.
i am not sure wheather auditing is enabled or not.

Please guide me how to go ahead and get the details which user deleted the data.

Your valuable comments will be highly appreciated.

Thanks and Regards in advance.
Re: How to find which user has deleted teh data in the table [message #302898 is a reply to message #302896] Wed, 27 February 2008 05:10 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Not really much you can do without auditing in place.
Re: How to find which user has deleted teh data in the table [message #302900 is a reply to message #302896] Wed, 27 February 2008 05:15 Go to previous messageGo to next message
it_me24
Messages: 167
Registered: March 2006
Location: delhi
Senior Member
Thanks a lot for your instant reply.

how to find wheather auditing is enabled or not.
and is there any way to find these datails using log miner, if yes.
Then kindly guide me how to start

Thanks once again
Re: How to find which user has deleted teh data in the table [message #302902 is a reply to message #302900] Wed, 27 February 2008 05:33 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Check if AUDIT_TRAIL is set. If it is set, check Viewing Database Audit Trail Information for what options may be set.

If you have named users, then Log Miner may provide the information. Check here for details.

[Updated on: Wed, 27 February 2008 05:38]

Report message to a moderator

Re: How to find which user has deleted teh data in the table [message #302907 is a reply to message #302896] Wed, 27 February 2008 05:54 Go to previous messageGo to next message
it_me24
Messages: 167
Registered: March 2006
Location: delhi
Senior Member
Hi

auditing is disabled in my database, please guide me if there is any other alternative to find the user name who deleted the data in the table.

please advice.
Re: How to find which user has deleted teh data in the table [message #302908 is a reply to message #302907] Wed, 27 February 2008 05:56 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Check the LogMiner option. I provided a link for the details on the process above.
Re: How to find which user has deleted teh data in the table [message #302914 is a reply to message #302896] Wed, 27 February 2008 06:03 Go to previous messageGo to next message
it_me24
Messages: 167
Registered: March 2006
Location: delhi
Senior Member
Hi

as per user data has been deleted arround 12-feb-08, and after reviewing archives we donot have the archives file of more than 5 days in our database.
so is it still possible get the data back using logminer.


Appreciate your valuable comments in this regard.
Re: How to find which user has deleted teh data in the table [message #302925 is a reply to message #302914] Wed, 27 February 2008 06:24 Go to previous message
Michel Cadot
Messages: 68718
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
Yes, if you have the log files.

Regards
Michel
Previous Topic: runinstaller shows error
Next Topic: Non UNICODE character set for storing Korean and Chinese data
Goto Forum:
  


Current Time: Mon Dec 02 03:25:27 CST 2024