Discussion:
Find who deleted records from a table - Help please
Manjula Krishnan
2018-07-11 17:33:51 UTC
Permalink
Hi:

We dont have auditing turned on. DB is in archive log mode. Yesterday
someone/something deleted 12 records from a table and I need to find who.

Can someone help me please?

Thanks,

Manjula
Ruel, Chris
2018-07-11 17:42:40 UTC
Permalink
Looks into Oracle LogMiner. That may get you want you need.

_____________________________________________________________________
Chris Ruel * Oracle Database Administrator * Lincoln Financial Group
***@lfg.com<mailto:***@lfg.com> * Desk:317.759.2172 * Cell 317.523.8482

From: oracle-l-***@freelists.org [mailto:oracle-l-***@freelists.org] On Behalf Of Manjula Krishnan
Sent: Wednesday, July 11, 2018 1:34 PM
To: ORACLE-L <oracle-***@freelists.org>
Subject: Find who deleted records from a table - Help please

***This email is from an external source. Only open links and attachments from a Trusted Sender.***
Hi:

We dont have auditing turned on. DB is in archive log mode. Yesterday someone/something deleted 12 records from a table and I need to find who.

Can someone help me please?

Thanks,

Manjula
Notice of Confidentiality: **This E-mail and any of its attachments may contain
Lincoln National Corporation proprietary information, which is privileged, confidential,
or subject to copyright belonging to the Lincoln National Corporation family of
companies. This E-mail is intended solely for the use of the individual or entity to
which it is addressed. If you are not the intended recipient of this E-mail, you are
hereby notified that any dissemination, distribution, copying, or action taken in
relation to the contents of and attachments to this E-mail is strictly prohibited
and may be unlawful. If you have received this E-mail in error, please notify the
sender immediately and permanently delete the original and any copy of this E-mail
and any printout. Thank You.**
Vishnu
2018-07-11 17:43:54 UTC
Permalink
Hi Manjula, You can use Logminer to identify the reason.

Try this
https://docs.oracle.com/cd/B19306_01/server.102/b14215/logminer.htm#i1005606
Post by Manjula Krishnan
We dont have auditing turned on. DB is in archive log mode. Yesterday
someone/something deleted 12 records from a table and I need to find who.
Can someone help me please?
Thanks,
Manjula
Mladen Gogala
2018-07-11 18:00:07 UTC
Permalink
In addition to LogMiner, which is a pain in the neck or lower, does your
application have logging enabled? Maybe application logs will reveal
something?
Post by Manjula Krishnan
We dont have auditing turned on. DB is in archive log mode. Yesterday
someone/something deleted 12 records from a table and I need to find who.
Can someone help me please?
Thanks,
Manjula
--
Mladen Gogala
Database Consultant
Tel: (347) 321-1217

--
http://www.freelists.org/webpage/oracle-l
Paul Drake
2018-07-11 19:01:19 UTC
Permalink
Query might still be in the shared pool.
Undo segments might not have yet been overwritten.
Logminer might not be the only option.
Post by Mladen Gogala
In addition to LogMiner, which is a pain in the neck or lower, does your
application have logging enabled? Maybe application logs will reveal
something?
Post by Manjula Krishnan
We dont have auditing turned on. DB is in archive log mode. Yesterday
someone/something deleted 12 records from a table and I need to find who.
Can someone help me please?
Thanks,
Manjula
--
Mladen Gogala
Database Consultant
Tel: (347) 321-1217
--
http://www.freelists.org/webpage/oracle-l
Mariusz Piechna
2018-07-11 19:50:55 UTC
Permalink
Hi,
dba_hist_sqltext view will help you to find necessary DELETE statement and
dba_hist_active_sess_history view you find history details of session by
e.g. sql_id.

Cheers!
Post by Manjula Krishnan
We dont have auditing turned on. DB is in archive log mode. Yesterday
someone/something deleted 12 records from a table and I need to find who.
Can someone help me please?
Thanks,
Manjula
Loading...