DBAsupport.com Forums - Powered by vBulletin
Results 1 to 7 of 7

Thread: who did it?

  1. #1
    Join Date
    Jul 2000
    Posts
    68
    Hello, all:

    One of our schemas was deleted by somebody. We have a public perl script to clear a schema. Somebody typed it by mistake.

    Now the problem is how could i find the user who deleted this schema? We did not set up auditting.

    Thanks in advance.

  2. #2
    Join Date
    Apr 2000
    Location
    roma
    Posts
    131
    If you are lucky, try the view V_$SQLTEXT...but there the commands resides for a while. (oracle deletes records by itself by internal intervals)

  3. #3
    Join Date
    Jul 2000
    Posts
    68
    I did not get it.

    Anyway, thanks very much.

  4. #4
    Join Date
    Mar 2000
    Location
    CA
    Posts
    317
    V$SQLTEXT refers to the present contents of SGA.

    When it needs to fetch new set of Statements and it flushes the existing one and puts the new. So, if you can observe that SGA before it over writes then you will get it.

    Another way may be, do you have AUDITING enabled. That should help you to get detailes who deleted.
    Thanks
    Kishore Kumar

  5. #5
    Join Date
    Sep 2000
    Location
    Calcutta / Ahmedabad, India
    Posts
    137
    querying v$sqltext you can see the query/dml string but there is no way you can find out which user had issued the command
    Suvashish

  6. #6
    Join Date
    Apr 2000
    Location
    roma
    Posts
    131
    for dsuva:
    from v$sqltext you get the ADDRESS, than join from v$session by SADDR, you can get the username.

  7. #7
    Join Date
    Sep 2000
    Location
    Sao Paulo,SP,Brazil, Earth, Milky Way
    Posts
    350

    Another idea for : who did it

    Maybe the poster can dig in the redo log files ? Surelly the transaction IS registered in the redo log files, and AFAIK at least the terminal/machine involved and the time will be there, giving a clue for the culprit.
    Is it right ?

    []s
    Chiappa

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Click Here to Expand Forum to Full Width