I have an OLTP SQL Server 2005 instance with about 40 databases. One of the
heaviest hit databases has some “mystery data� showing up. I have been
running a trace for the last day filtering on the TEXT like the table name.

I have seen the queries I issue to the table. I see the events where the
apps team deletes the data and their query to verify it is gone. This
morning, the data is back, but there are no events in the trace since their
last check at the end of the day to verify the data does not exist.

Here are the events being captured:
Stored Procedures
- SP:StmtStarting

TSQL
- Exec Prepared SQL
- SQL:StmtStarting

Anybody have any suggestions on what to do now?

Scagnetti (Scagnetti (AT) discussions (DOT) microsoft.com) writes:
It could be a prepared query, which would show up only as sp_execute
I think.

What about a trigger on the table that audits inserts, capturing time,
host_name, app_name and user name? That could help to narrow down the
source.


--
Erland Sommarskog, SQL Server MVP, esquel (AT) sommarskog (DOT) se

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinf...ons/books.mspx