How to find who dropped the table

Hi Gurus,
Is there a way beside auditing to know who dropped the table,i know we could use logminer for that but the thing is that i don't have supplemental logging turned on while the table got dropped.
I think we need to have supplemental logging enabled to find who did what even for the DDL correct?
Is there any way i can find who dropped the table?
Thanks

user9097501 wrote:
Hi Gurus,
Is there a way beside auditing to know who dropped the table,i know we could use logminer for that but the thing is that i don't have supplemental logging turned on while the table got dropped.
I think we need to have supplemental logging enabled to find who did what even for the DDL correct?
Is there any way i can find who dropped the table?
ThanksI can think about 2 different ways to do it ;
1- by using Audit http://www.oracle-base.com/articles/10g/Auditing_10gR2.php ; if it's enabled
2- or there another method , does not give a real precision, but could be helpful if the audit is not enabled ; can be to check listener log. Listener does show database connection requests. So if you know the time the table was dropped (SELECT DROPTIME
FROM DBA_RECYCLEBIN
WHERE Owner = 'XXX'
AND ORIGINAL_NAME= 'YYYYYY'), you can see from the listener log what connected to the database at that time. (asuming that the connection request was from a remote client, not the DB server)
E.g if I found that the table were dropped at 14:45:18 then I can tell from my listener log that it is probably due to a user connected by the portal application on host portal.es6.orawiss.net:
23-AUG-2010 14:45:18 * (CONNECT_DATA=(SID=DB02)(CID=(PROGRAM=httpd)(HOST=portal.es6.orawiss.net)(USER=apache))) * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.44.30)(PORT=60618)) * establish * DB02 * 0
Listener logs are an important source of audit information.
Hope it helps :)

Similar Messages

How to find out all the tables in a schema with a particular column

Hi
Is there a way to find out all the tables in schema1 that has col1 as one of the columns?

select table_name from dba_tab_cols where owner='schema' and column_name='col1';

How to find out all the tables associated with particular T-code or Program

Hi All,
In 4.6B we have a transaction code SE49, where we can see all the tables associated with particular Transaction code or Program.
But in ECC 5.0 or in ECC 6.0 this transaction code is not available.So is there any alternative where i can find out all the tables associated with particular T-code or Program.
Thanks
Shubham

Hi,
you are right, Transaction SE49 as well as SE48 do not exist anymore I'm afraid, they
are discontinued.
You might try to create a transaction variant:
1) Start SE93 to create a transaction variant
2) Specify a name, eg. ZSE49, and choose the first option:
   "program and screen (dialog transaction)
3) Here specify SAPMSEUZ as program, and 200 as screen number
4) Choose a suitable development class (package) if you want it to be
   transportable or Local (=$TMP) if non-transportable
5) press Save
Same applies for SE48, same program but dynpro 100.
Sorry for not being able the reasons behind the decision to discontinue
these transactions. I suppose at least part of the functionality was
integrated in SE38.
Best regards
Erika

How to find the user who dropped the tables

Hi All,
Some one has dropped 5 tables in the production database that has caused a SEV1 but thankfully we are having those tables in recyclebin and we are restored those with out data loss.
But I want to know who has dropped those tables and want to know who has connected to database at that time. Can you please guide me in this how to find out....
Database version: 11.2.0.2 version
Thanks
Kk
Edited by: 908098 on Jan 18, 2012 4:23 AM

Or you can use this kind of audit (i had used this some time ago)
-is pretty detailed but is good for auditing purpuse.
hope this helps
CREATE TABLE AUDITORIA_ESQUEMA (
operation VARCHAR2(30),
os_user VARCHAR2(30),
obj_owner VARCHAR2(30),
object_name VARCHAR2(30),
object_type VARCHAR2(30),
sql_text     VARCHAR2(64),
attempt_by VARCHAR2(30),
attempt_dt DATE,
Ip_adress VARCHAR2(15));
CREATE OR REPLACE TRIGGER AUDITORIA_ESQUEMA
BEFORE CREATE OR ALTER OR DROP OR RENAME or alter
ON DATABASE
DECLARE
oper varchar2(200);
sql_text ora_name_list_t;
i      PLS_INTEGER;
BEGIN
SELECT ora_sysevent
INTO oper
FROM DUAL;
i := sql_txt(sql_text);
IF oper IN ('CREATE', 'DROP','RENAME','ALTER') THEN
     INSERT INTO AUDITORIA_ESQUEMA
     SELECT ora_sysevent,(select sys_context('USERENV','OS_USER') from dual)
, ora_dict_obj_owner,
     ora_dict_obj_name,ora_dict_obj_type, sql_text(1), USER, SYSDATE,
     (select SYS_CONTEXT('USERENV', 'IP_ADDRESS') from dual)
     FROM DUAL;
ELSIF oper = 'ALTER' THEN
     INSERT INTO AUDITORIA_ESQUEMA
     SELECT ora_sysevent,(select sys_context('USERENV','OS_USER') from dual)
, ora_dict_obj_owner,
     ora_dict_obj_name,ora_dict_obj_type, sql_text(1), USER, SYSDATE,
     (select SYS_CONTEXT('USERENV', 'IP_ADDRESS') from dual)
     FROM sys.gv_$sqltext
     WHERE UPPER(sql_text) LIKE 'ALTER%'
     AND UPPER(sql_text) LIKE '%NEW_TABLE%';
END IF;
END AUDITORIA_ESQUEMA;

How to find OWNER of the table- if user doesn't have a access to it?

I am in the strange situtation- that I need to make a configuration script to give to DBA so that he can give necessary access to to populate the data into the application. However- he needs exact sql scripts so that he can run it without manupulating it. The user does have access to some tables but not all the tables. So I need to write the scriopts with OWNER name and table name and what permission I need.
I probably can do it with trial and error method by quering the scripts: Desc OWNER_name(guess).table_name (known)- if it runs in my Toad - then my educated guess owner is right otherwise ..if it gives the message "object nor found or something like that" then the educated guessed OWNER is NOT correct - then need to do trial and method by selecting all the possible schema I know in that application.
Right?
Is there any experts/oracle db biggies has any easier and accurate SOLUTION. THE DATABASE 11G
Edited by: Higlander on Sep 29, 2010 2:33 PM

Hi,
You probably need to ask your DBA to create synonyms for you for the table you want to access to or otherwise you have to ask him grant permission to you on that table itself. If you are not sure who is the owner of the table, then you will have to ask your DBA to query in dba_tables/dba_views/dba_segments views to find the owner.
Regards,
SK

How to find Who did the PGI for Outbound delivery??

Dear Experts,
I want to find out who has done the Post Goods Issue for an outbound Delivery
Please let me know what field and which table?
Can I get this information from VL06O report?
Thanks,
Shetty

Additionally to Sanjay's post:
VL02N > Environment > Changes - here you can check who set the total goods movement status to "C".
Change related data is stored in CDHDR and CDPOS data tables (in case of GI CDPOS-FNAME = "WADAT_IST").
If you decide to use material document then the userID is stored in MKPF-USNAM. Delivery number is usually stored in MKPF-XBLNR (or you can find the material document from delivery via VBFA, but MKPF should be easier...)
In VL06O you don't have this information. Maybe you should create ZVL06O or another report (development; if MB51 is not acceptable).
Edited by: Csaba Szommer on Aug 10, 2010 9:33 AM

How to find and replace the table name/column name

We have just upgraded the application to R12. Have many reports developed in Oracle Reports Builder. There are many changes in R12 table and column names when compare with 11i. Please suggest a solution to change the table name or column name in multiple reports queries instead of doing manually.

A Google search may turn up a downloadable service manual for the Laserjet 4600.
You might also ask in the HP Enterprise Business Community Forum here.
Bob Headrick, HP Expert
I am not an employee of HP, I am a volunteer posting here on my own time.
If your problem is solved please click the "Accept as Solution" button ------------V
If my answer was helpful please click the "Thumbs Up" to say "Thank You"--V

How to find out whether the tables in SGA?

it's 11.2.0.3.0
Thanks.

IDM99 wrote:
it's 11.2.0.3.0
Thanks.Well, by default entire tables aren't stored in the buffer, just the blocks that were required. They are then aged out. You can view information on segment buffer pool usage here:
http://docs.oracle.com/cd/E11882_01/server.112/e16638/memory.htm#i40226
If you want to keep objects in memory, you can use the KEEP pool. It's generally not needed.

How to find who has created the condition records

hi all,
in POF1 condition records were created.for material and plant.how to find who has created condition records for the material and plant.
is there any way to find who has created please help me out.
thanks
sunny

Hi,
There are two ways of finding the who has created the ondition record.
01. This is through the sales order-> Item details level-> condtion Tab----> Select the condition type and click on dispaly condition record below in the same creen. Then Goto tab on the menu and select the overview of the condition record. After do so you will have the details of diffrenr tabs. In this you need to select the Administrative data for the person who had created the condition record.
02. Goto T. Code VK13 and give your condition type for which you need to find the person created the record. Select the header details tab for the person who had created the record.
Hope this is fine with you.
Bye & Enjoy SAP.
Koganti

How to find last accessed/updated tables and the query text?

I am using :
Oracle8i Enterprise Edition Release 8.1.7.4.0 - Production
With the Partitioning option
JServer Release 8.1.7.4.0 - Production
How to find last accessed/updated tables and the query text?
Regards
LEE1212

Check DBA_TBALES view there you find one date column that indicate last update
One option is as follows:
(1) Turn the auditing on: AUDIT_TRAIL = true in init.ora
(2) Restart the instance if its running.
(3) Audit the table:
     AUDIT INSERT,SELECT,DELETE,UPDATE on TableName
     by ACCESS WHENEVER SUCCESSFUL
(4) Get the desired information using :
     SELECT OBJ_NAME,ACTION_NAME ,to_char(timestamp,'dd/mm/yyyy , HH:MM:SS')
     from sys.dba_audit_object.
Cheer,
Virag Sharma
http://virag.sharma.googlepages.com/
http://viragsharma.blogspot.com/
Message was edited by:
virag_sh

How to find who has created the determination records for packaging instruc

how to find who has created the determination records for packaging instructions in POF1.
need to find the user details from POF3.
can any one plz suggets me.

Sunny,
Go to POF1 click on determined record -> Display -.> enter-> F8 then -> double click on the record for which you want to see the responsible person ->click on admin. data tab here u will find the responsible person. hope u got the right answer.
Ravi Thapliyal
IdhaSoft

How to drop the tables (articles) in subscription database MERGE replication.

We have configured the merge replication from publication server to subscription server,
Here I mistakenly selecting few tables (articles) in publication,
Now I need to remove those mistakenly selected tables in subscription server database .
Note: I am trying to below way but unable to remove those tables in subscription server.
1<sup>st</sup> I unselected those tables (articles) in publication, but not working.
Could please tell me the how to remove those tables in subscription database.

Ok that is normal, dont worry, if you mistakenly chosen few tables, just add the new tables
that you forgot it, just make click on the publication, you only have to Re-run the snapshot agent, i mean you must generate another snapshot and then synchronice with your suscriber, and then you will not need DROP the tables on the suscriber, if you have
troubles yet, please post imagens to help you more !
Thanks and regards.

Unable to descripe the table and unable to drop the table

Hi,
I have a temp table that we use like staging table to import the data in to the main table through some scheduled procedures.And that will dropped every day and will be created through the script.
Some how while I am trying to drop the table manually got hanged, There after I could not find that table in dba_objects, dba_tables or any where.
But Now I am unable to create that table manually(Keep on running the create command with out giving any error), Even I am not getting any error (keep on running )if I give drop/desc of table.
Can you please any one help on this ? Is it some where got stored the table in DB or do we any option to repair the table ?
SQL> select OWNER,OBJECT_NAME,OBJECT_TYPE,STATUS from dba_objects where OBJECT_NAME like 'TEMP%';
no rows selected
SQL> desc temp
Thank in advance.

Hi,
if this table drops then it moved DBA_RECYCLEBIN table. and also original name of its changed automatically by oracle.
For example :
SQL> create table tst (col varchar2(10), row_chng_dt date);
Table created.
SQL> insert into tst values ('Version1', sysdate);
1 row created.
SQL> select * from tst ;
COL        ROW_CHNG
Version1   16:10:03
If the RECYCLEBIN initialization parameter is set to ON (the default in 10g), then dropping this table will place it in the recyclebin:
SQL> drop table tst;
Table dropped.
SQL> select object_name, original_name, type, can_undrop as "UND", can_purge as "PUR", droptime
2 from recyclebin
SQL> /
OBJECT_NAME                    ORIGINAL_NAME TYPE UND PUR DROPTIME
BIN$HGnc55/7rRPgQPeM/qQoRw==$0 TST           TABLE YES YES 2013-10-08:16:10:12
All that happened to the table when we dropped it was that it got renamed. The table data is still there and can be queried just like a normal table:
SQL> alter session set nls_date_format='HH24:MI:SS' ;
Session altered.
SQL> select * from "BIN$HGnc55/7rRPgQPeM/qQoRw==$0" ;
COL        ROW_CHNG
Version1   16:10:03
Since the table data is still there, it's very easy to "undrop" the table. This operation is known as a "flashback drop". The command is FLASHBACK TABLE... TO BEFORE DROP, and it simply renames the BIN$... table to its original name:
SQL> flashback table tst to before drop;
Flashback complete.
SQL> select * from tst ;
COL        ROW_CHNG
Version1   16:10:03
SQL> select * from recyclebin ;
no rows selected
It's important to know that after you've dropped a table, it has only been renamed; the table segments are still sitting there in your tablespace, unchanged, taking up space. This space still counts against your user tablespace quotas, as well as filling up the tablespace. It will not be reclaimed until you get the table out of the recyclebin. You can remove an object from the recyclebin by restoring it, or by purging it from the recyclebin.
SQL> select object_name, original_name, type, can_undrop as "UND", can_purge as "PUR", droptime
2 from recyclebin
SQL> /
OBJECT_NAME                    ORIGINAL_NAME TYPE                      UND PUR DROPTIME
BIN$HGnc55/7rRPgQPeM/qQoRw==$0 TST           TABLE                     YES YES 2006-09-01:16:10:12
SQL> purge table "BIN$HGnc55/7rRPgQPeM/qQoRw==$0" ;
Table purged.
SQL> select * from recyclebin ;
no rows selected
Thank you
And check this link:
http://www.orafaq.com/node/968
http://docs.oracle.com/cd/B28359_01/server.111/b28310/tables011.htm
Thank you

How to find who has deleted program

Hi,
Some one has delete a report from the system.How can I find the user who has deleted?
thanks

Hi ,
Please refer the threads,
How to find who deleted my program?
How to find deleted program
Best Regards.
Reward points if it is helpful.

How to identify who made the changes to the tfs security

Hi All,
We are into a weird situation. In our environment we create groups TFS_Project admins, TFS_Contributors, TFS_buildusers, TFS_Readers in AD for every new project and added to corresponding group on the Team project level.
One of the users is a member of TFS_project admins and TFS_contributors. Next day he is not belongs to any group. Some one has been removed him from the groups.
Question: how to find, who has deleted the user from the groups.
Please help on this .. very high priority issue.
Thanks,
Rajukumar

Hello,
Go To RSPC1 give your process chain name (Go to LOG View ) there you will get Date selectin screen (give This Month and last Month or as per your reqirement) there you can see who ran the process chain with ID.
Regards,
Edited by: Subbu_Amar on Oct 13, 2010 5:01 AM

How to find who dropped the table

Similar Messages

Maybe you are looking for