数据库丢失！寻找根本原因 [英] Database Missing ! Finding the root cause

问题描述

假设有一天，一位管理员来到办公室，像往常一样在 Sql Server 数据库上执行管理任务，但令他惊讶的是，发现一个数据库丢失了.他不知道是谁删除了它，或者它是从外部批处理或 SQL 注入等中删除的……从哪里开始调查以及应该发生哪些重要参数/发现以找到 Drop DB 的根本原因.比如应该检查哪些日志，应该调查哪些信息?

Assume one fine day an admin comes to the office like he always does to do his admin tasks on Sql Server Databases and to his surprise finds a database missing. He has no clue of who dropped it or was it from an external batch or SQL injection etc ... where do one start an investigation and what are the important parameters/ findings that should happen to find the root cause of the Drop DB. Like what logs shud be checked and what information shud be investigated ?

推荐答案

在 c:\Program Files... 下的日志文件中有 SQL Server 管理的默认跟踪...您可以通过 SQL 命令查看此文件.例如，要查看文件 log_19.trc，您可以像

There is a defaul trace managed by SQL Server in a log file under c:\Program Files... You can view this file by SQL command. For example to see the file log_19.trc you can fire command like

SELECT * 
FROM fn_trace_gettable
('C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\log_19.trc', default)

这可能会显示何时以及谁删除了数据库.可以在 这里...

This will probably show when and who dropped the database. More information can be found Here...

这篇关于数据库丢失！寻找根本原因的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！