December 8, 2010 at 3:09 pm
I have a situation where it appears someone may be downloading data from a database table without permission.
Is there a way to monitor the number of records being read from a specific table or even the database containing the table and preferably notify someone real-time when a threshold is exceeded?
Also is there a way to tell what records have been read from a table after the fact, maybe some way to use the execution plan? It would be helpful to know exactly what data this person is going after.
We are running SQL server 2005 (9.00.4035.00) running on Windows Server 2003 R2 SP1
Thanks for any help or ideas.
Gregg
December 8, 2010 at 4:21 pm
Last question first:
Also is there a way to tell what records have been read from a table after the fact, maybe some way to use the execution plan? It would be helpful to know exactly what data this person is going after.
Only with a server side trace going before the action occurs. Then you'd be able to research the dynamic query, or the proc, being called.
Is there a way to monitor the number of records being read from a specific table or even the database containing the table and preferably notify someone real-time when a threshold is exceeded?
Offhand? No, not really. Definately not at the table level. Might be able to do something with perfmon at the DB level. I think you can use DBCC Logical Scan Bytes/sec, but I'd have to do some counter research which I don't have at my fingertips atm. Usually I do server level monitoring, which you could use buffer manager Page Reads/sec to help with, but it's not specific to one database.
Never stop learning, even if it hurts. Ego bruises are practically mandatory as you learn unless you've never risked enough to make a mistake.
For better assistance in answering your questions[/url] | Forum Netiquette
For index/tuning help, follow these directions.[/url] |Tally Tables[/url]
Twitter: @AnyWayDBA
December 8, 2010 at 4:25 pm
Gregg Your best bet will be to run a trace that capture activity on the database, that way you can see which statements are being executed, when and by whom.
I wrote a blog post a while back about setting up server side traces and using profiler:
http://www.gethynellis.com/2010/03/setting-up-server-side-trace.html
Grant Fritchey also recently wrote a good article talking you through setting up things like this this too.
http://www.sqlservercentral.com/articles/Performance/71549/
Gethyn Elliswww.gethynellis.com
Viewing 3 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply