How to find what all DML statements executed

Hi..

I have one severe problem...

Some user has deleted all the rows from one table called tab1...

Now management has asked me to get the details of the user who has done this alongwith timestamp....

I have checked V$SQL, V$SQLAREA and V$SQLTEXT to find any row contains tab1 in the sql statement...All the retrieved rows are just select statements and no any update or delete statement i found...

I dont have enabled sql_trace...Even LogMiner is also not configured..

Can any one help me out to find the solution..

Is there any view / table which stores all the executed sql's..

unless you have auditing/log miner.. there no chance..

Abhay.

I do not think u could get the DML operations unless u previously
opened auditing on the tables.
You can track the DML operations done on the tables by enabling auditing option in oracle database. But it increases the load of the server on each DML operation. Should be carefull when and the extent of the auditing.
regards,

Quote:

---

Originally posted by syucel
I do not think u could get the DML operations unless u previously
opened auditing on the tables.
You can track the DML operations done on the tables by enabling auditing option in oracle database. But it increases the load of the server on each DML operation. Should be carefull when and the extent of the auditing.
regards,

---

LOG MINER will do.

Check all those userid u had granted delete to that table and maybe
you got security user time logs who was there at the time the crime
took place:D

Ms C3

PS. i just love lots of my name appering on the forum and overwrite
papa reydp:p

Quote:

---

Originally posted by kris123
Check all those userid u had granted delete to that table and maybe
you got security user time logs who was there at the time the crime
took place:D

Ms C3

PS. i just love lots of my name appering on the forum and overwrite
papa reydp:p

---

This doesn't give you concrete proof.

Better than nothing, at least u done something to make ur boss see ur
working on it:D

Quote:

---

Originally posted by kris123
Better than nothing, at least u done something to make ur boss see ur
working on it:D

---

It is much impressive to your boss when you can identify who had done it with proof.:D

He cant:p coz he said he didnt configure auditing and arhiving and
logminer
:rolleyes:
Ok back to work now....i still have to test the applications if it
will run on my new migrated 10g. I just got stuck on that invalid
procedure that blinded me with that numder(40):D

You can now have all ur names appear here papa:p

LogMiner need to be configure.
You only run it when it's necessary.:D