how can we check who deleted the transaction even after few days in sql server 2008 r2 is there any command instead of logs
- Anybody can ask a question
- Anybody can answer
- The best answers are voted up and rise to the top
You'd have to do forensics on the transaction logs using 3rd party tools
Of course, the log entries may not be there due to backups or simple recovery.
If you want auditing, build it in. And restrict permissions of course.
None of the tools can help if the transactions you want to read are overwritten by new ones. This doesn't happen in Full recovery model (except when you create a transaction log backup, but then the transactions are safe in the backup file). Also, there is a chance to read the transactions even when you're in Simple recovery model, if there were not many new transactions that could overwrite the old ones. The less subsequent transactions, the better chances to read the ones you want.