Sybase NNTP forums - End Of Life (EOL)

The NNTP forums from Sybase - forums.sybase.com - are now closed.

All new questions should be directed to the appropriate forum at the SAP Community Network (SCN).

Individual products have links to the respective forums on SCN, or you can go to SCN and search for your product in the search box (upper right corner) to find your specific developer center.

Creator of dump?

3 posts in General Discussion Last posting was on 2012-08-09 21:37:32.0Z
Jeff Posted on 2012-08-09 15:00:08.0Z
Sender: 4e44.5023cfd6.1804289383@sybase.com
From: Jeff
Newsgroups: sybase.public.ase.general
Subject: Creator of dump?
X-Mailer: WebNews to Mail Gateway v1.1t
Message-ID: <5023d078.4e57.1681692777@sybase.com>
NNTP-Posting-Host: 172.20.134.41
X-Original-NNTP-Posting-Host: 172.20.134.41
Date: 9 Aug 2012 08:00:08 -0700
X-Trace: forums-1-dub 1344524408 172.20.134.41 (9 Aug 2012 08:00:08 -0700)
X-Original-Trace: 9 Aug 2012 08:00:08 -0700, 172.20.134.41
Lines: 9
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:31328
Article PK: 74217

A dump was created and presumably loaded on a database. We
still have the manually created dumpfile. The backup server
log was altered. This caused multiple issues in a production
env.

The windows event viewer logs were purged.

Is there a way to find which user/login created or loaded
the dump/database?


Rob V Posted on 2012-08-09 19:13:48.0Z
From: Rob V <rob@sypron.nl>
Reply-To: rob@sypron.nl
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
Newsgroups: sybase.public.ase.general
Subject: Re: Creator of dump?
References: <5023d078.4e57.1681692777@sybase.com>
In-Reply-To: <5023d078.4e57.1681692777@sybase.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: vip152.sybase.com
X-Original-NNTP-Posting-Host: vip152.sybase.com
Message-ID: <50240bec$1@forums-1-dub>
Date: 9 Aug 2012 12:13:48 -0700
X-Trace: forums-1-dub 1344539628 172.20.134.152 (9 Aug 2012 12:13:48 -0700)
X-Original-Trace: 9 Aug 2012 12:13:48 -0700, vip152.sybase.com
Lines: 34
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:31329
Article PK: 74218


On 09-Aug-2012 17:00, Jeff wrote:
> A dump was created and presumably loaded on a database. We
> still have the manually created dumpfile. The backup server
> log was altered. This caused multiple issues in a production
> env.
>
> The windows event viewer logs were purged.
>
> Is there a way to find which user/login created or loaded
> the dump/database?
>

If you don't have the backupserver log files anymore, I don't think
there is a way to find out unless you have auditing installed and
configured (Even with the backup server log files I'm not entirely sure
you could find this out BTW)

HTH,

Rob V.
-----------------------------------------------------------------
Rob Verschoor

Certified Professional DBA for Sybase ASE, IQ, Replication Server

Author of Sybase books (order online at www.sypron.nl/shop):
"Tips, Tricks & Recipes for Sybase ASE"
"The Complete Sybase IQ Quick Reference Guide"
"The Complete Sybase ASE Quick Reference Guide"
"The Complete Sybase Replication Server Quick Reference Guide"

rob@NO.SPAM.sypron.nl | www.sypron.nl | Twitter: @rob_verschoor
Sypron B.V., The Netherlands | Chamber of Commerce 27138666
-----------------------------------------------------------------


Bret Halford Posted on 2012-08-09 21:37:32.0Z
From: Bret Halford <bret@sybase.com>
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
Newsgroups: sybase.public.ase.general
Subject: Re: Creator of dump?
References: <5023d078.4e57.1681692777@sybase.com> <50240bec$1@forums-1-dub>
In-Reply-To: <50240bec$1@forums-1-dub>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: vip152.sybase.com
X-Original-NNTP-Posting-Host: vip152.sybase.com
Message-ID: <50242d9c$1@forums-1-dub>
Date: 9 Aug 2012 14:37:32 -0700
X-Trace: forums-1-dub 1344548252 172.20.134.152 (9 Aug 2012 14:37:32 -0700)
X-Original-Trace: 9 Aug 2012 14:37:32 -0700, vip152.sybase.com
Lines: 28
Path: forums-1-dub!not-for-mail
Xref: forums-1-dub sybase.public.ase.general:31330
Article PK: 74219


On 8/9/2012 1:13 PM, Rob V wrote:
> On 09-Aug-2012 17:00, Jeff wrote:
>> A dump was created and presumably loaded on a database. We
>> still have the manually created dumpfile. The backup server
>> log was altered. This caused multiple issues in a production
>> env.
>>
>> The windows event viewer logs were purged.
>>
>> Is there a way to find which user/login created or loaded
>> the dump/database?
>>
>
> If you don't have the backupserver log files anymore, I don't think
> there is a way to find out unless you have auditing installed and
> configured (Even with the backup server log files I'm not entirely sure
> you could find this out BTW)
>
> HTH,
>
> Rob V.

Without auditing, I don't see any way to tell who
did the DUMP or the LOAD. The backupserver errorlog wouldn't
help, it does not show any information on which user
was involved.

-bret