question

Noonies avatar image
Noonies asked

Find when a query ran an Update to trace the cause

How can I find when an update statement was generated which modified an order number? We cannot locate where in the application this had occurred. I ran a revoke update on the table and specified column but would like to locate what triggered this last night. If I do not have auditing on SQL Server 2008, is there another way to see when this query was run and what time? I would use SQL Profiler but unfortunately there is no exact time when this happened logged in the application database.
ssms
10 |1200
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

·
Tim avatar image
Tim answered
I haven't ever done it but I have heard there are transaction log parsers which can open and read the transaction log. If that is true then maybe you could load up that days transaction log and search for the value that was updated. Not sure if the default trace would still contain the information. Since you said auditing for that event was not on, your options are very slim.
1 comment
10 |1200
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Grant Fritchey avatar image Grant Fritchey ♦♦ commented ·
It's actually shockingly easy: http://www.sqlservercentral.com/articles/Transaction+Logs/71415/
2 Likes 2 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.