Re: Records missing - can redo logs be gleaned for perpetrator?
Date: 1995/05/07
Message-ID: <3ojf15$7q_at_kadath.zeitgeist.net>#1/1
In article <3oelid$k2j_at_also.hooked.net>,
Walter Schenk <wschenk_at_also.hooked.net> wrote:
>Jeff Perry wrote:
>>We're running a 7.0.13 database without any of the auditing options set.
>Is there a utility to analyze the >archived redo logs to identify the user
>who deleted records from a given table?
>
>There is a very good utility that analyzes the logs. It's SQL*TRAX. The
>company is CornerStone Software (I believe I got that right). However, no
>utility is going to help you out here, as information about users is NOT
>STORED IN THE LOG!! The only information that goes into the log is the
>changed data. Sorry, about the bad news but that's how it works.
Thank you for mentioning us, Walter. You are correct, the user info is NOT recorded in the redo log files. However, SQL*Trax could be used to find the rows that were deleted and re-insert them. In fact, we did just that for a database at Oracle back in January.
SCott.
P.S. The company name is "TurnStone Software" (not "CornerStone")
415-851-9576
smartin_at_turnstone.com
>
>Walter Schenk
>SoluTech Consulting
Received on Sun May 07 1995 - 00:00:00 CEST