Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Who changed the recovery model? Expand / Collapse
Author
Message
Posted Thursday, January 17, 2013 3:39 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: 2 days ago @ 7:58 AM
Points: 19, Visits: 94
Hi All

I'm trying to establish who changed the recovery model. I've tried default trace, Sp_readerrorlog 0, 1, 'recovery', the logs etc but not really finding much joy in actually finding the event and then who.

Does anyone have anything that may help?

Thanks in advance!

Martyn
Post #1408289
Posted Thursday, January 17, 2013 3:53 AM


SSCertifiable

SSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiable

Group: General Forum Members
Last Login: Friday, April 12, 2013 3:51 AM
Points: 5,075, Visits: 4,831
The log will show the spid and timestamp that the recovery model changed.

You can then correllate that back to the default trace, as long as the data is still in the default trace.

Other than that you will need to setup custom auditing, via a DDL trigger, extended events etc which trap the ALTER DATABASE command




Want an answer fast? Try here
How to post data/code for the best help - Jeff Moden
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
CrossTabs-Part1 & Part2 - Jeff Moden
SQL Server Backup, Integrity Check, and Index and Statistics Maintenance - Ola Hallengren
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger

Post #1408302
Posted Thursday, January 17, 2013 10:32 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: 2 days ago @ 7:58 AM
Points: 19, Visits: 94
Thank you for you reply. I've had a good stab at it and eventually found the info needed within the windows server log. Thanks though.
Post #1408541
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse