MSSQL 2000 Activity Logs

Does the SQL server logs the information on when a database has ben
deleted, attached, deatached, and so on?
This morning I recived a call from remote site that the aplication won't
connect to the server. It turns out that the user database has disapeared
from the server. I can't see it in the EM, nor I can see the .mdf/.ldf files
on the disk. The SQL server logs (from the EM) just show me that the
database was opened (started) at some time this weekend, and that's it.
Are there more detailed logs, wich I was unable to find?
Mario
"I can do it quick. I can do it cheap. I can do it well. Pick any two."
Mario Splivalo
msplival@.jagor.srce.hrHi,
I feel that SQL Server wont store any information of that sort by default.
If you keep enabled the profiler then you can see the command DROP DATABASE
, by using that you can identify the user who has dropped it. But old data
can not be retrived.
Thanks
Hari
MCDBA
"Mario Splivalo" <majk@.fly.srk.fer.hr> wrote in message
news:slrnc5td57.f2.majk@.fly.srk.fer.hr...
> Does the SQL server logs the information on when a database has ben
> deleted, attached, deatached, and so on?
> This morning I recived a call from remote site that the aplication won't
> connect to the server. It turns out that the user database has disapeared
> from the server. I can't see it in the EM, nor I can see the .mdf/.ldf
files
> on the disk. The SQL server logs (from the EM) just show me that the
> database was opened (started) at some time this weekend, and that's it.
> Are there more detailed logs, wich I was unable to find?
> Mario
> --
> "I can do it quick. I can do it cheap. I can do it well. Pick any two."
> Mario Splivalo
> msplival@.jagor.srce.hr|||On 2004-03-22, Hari Prasad <hari_prasad_k@.hotmail.com> wrote:
> Hi,
> I feel that SQL Server wont store any information of that sort by default.
> If you keep enabled the profiler then you can see the command DROP DATABAS
E
> , by using that you can identify the user who has dropped it. But old data
> can not be retrived.
>
Yes, when I have the profiler running, then I can see what's going on. But,
most of the time, I don't keep the profiler up.
Is there a way to tell SQL server 'do, please, keep logs of who and when
created/dropped/attached/deatached databases'?
Mike
--
"I can do it quick. I can do it cheap. I can do it well. Pick any two."
Mario Splivalo
msplival@.jagor.srce.hr|||Mario
You can run SQL Server Profile to capture those commands and save it to the
table.
As far as I know with SQL Server 2005 you will be able to define a trigger
on a table or even on a database ( I am not certain) for drop table events.
"Mario Splivalo" <majk@.fly.srk.fer.hr> wrote in message
news:slrnc5tjfd.p0k.majk@.fly.srk.fer.hr...
> On 2004-03-22, Hari Prasad <hari_prasad_k@.hotmail.com> wrote:
default.
DATABASE
data
> Yes, when I have the profiler running, then I can see what's going on.
But,
> most of the time, I don't keep the profiler up.
> Is there a way to tell SQL server 'do, please, keep logs of who and when
> created/dropped/attached/deatached databases'?
> Mike
> --
> "I can do it quick. I can do it cheap. I can do it well. Pick any two."
> Mario Splivalo
> msplival@.jagor.srce.hr|||On 2004-03-22, Uri Dimant <urid@.iscar.co.il> wrote:
> Mario
> You can run SQL Server Profile to capture those commands and save it to th
e
> table.
So, if I'm not running the profiler at the moment that actuall event of
droping/deleting the database was taking place, I have no way of seeing what
happened.
The funniest thing is that the missing database was published for
replication, so you can't just delete it from the EM. If you try to delete
the file from the disk (using Windows Explorer, for instance), it will tell
you that the file is in use (because SQL server is using it).
But, SQL server was running all the time (uptime is more than 6 mths), and
the database just dissapeared. No .mdf files found on the disk, no errors
(that I can find) on the SQL server. If I run the NTFS-Undelete utility (i
tried several ones) I can find dozens of deleted files (some were deleted
more than 6 months ago!), but none of the files are my database files.
At this point of time I have no way or knowledge to explain what exactley
happened.
Mike
--
"I can do it quick. I can do it cheap. I can do it well. Pick any two."
Mario Splivalo
msplival@.jagor.srce.hr|||On 2004-03-22, Mario Splivalo <majk@.fly.srk.fer.hr> wrote:
> On 2004-03-22, Uri Dimant <urid@.iscar.co.il> wrote:
>
I browsed the transaction log for the master database, and found that
database was deleted
Mike
"I can do it quick. I can do it cheap. I can do it well. Pick any two."
Mario Splivalo
msplival@.jagor.srce.hr