RE: WHO DID IT?

If in archive mode maybe log miner would help

-----Original Message-----
From: Jim Conboy [mailto:Jim.Conboy_at_trw.com] Sent: August 17, 2000 10:28 AM
To: Multiple recipients of list ORACLE-L Subject: Re: WHO DID IT?

If the database hasn't been bounced, see if any suspicious (DELETE or TRUNCATE) statements can be found in V$SQLAREA (look at sql_text). Then join parsing_user_id to user# in sys.user$ to find the username. If the DB has been bounced, and you don't have auditing on, I don't know of any other way to do this.

Jim

>>> rferguso_at_level1.com 08/16/00 06:47PM >>>

a production database has misteriously lost all of its data...I can re-create it
from backup but before I do I'd like to find out who was the last person to access certain tables in order to find out who truncated everything...does anyone have a method to find the culprit?

thanks in advance...
super-sluth...:)

-- 
Author: Roy Ferguson
  INET: rferguso_at_level1.com 

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



-- 
Author: Jim Conboy
  INET: Jim.Conboy_at_trw.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).