How can I find out who deleted a MySQL Databse?

[em.ci]

Hi

Which Log-File can I analyze to find out who or what has happened to a database.

Thanks in advance!

 

[LostNerd]

I don't believe there is a way to find this out however, if that database was still required, you should be able to retrieve it from a cpbackup file.

 

[em.ci]

Many thanks for your response.

Then I'll try to restore. I thought it would be a way to check this.

Regards,
em.ci

 

[LostNerd]

If you open the backup file, you should find a file in there containing MySQL dumps for each database. If you re-create the database manually in cPanel, you can import that .sql file respectively. That way you do not have to restore a full backup and risk losing any changes made since that backup.

Hope this helps!

 

[cPanelMichael]

Hello,

You could review /usr/local/cpanel/logs/access_log to see if any unfamiliar IP addresses accessed cPanel under a certain username and viewed the "MySQL Databases" page.

Thank you.

 

[em.ci]

Many thanks for your help guys!

I restored the Database as you told me to do.

Regards,
em.ci

 

[LostNerd]

Thanks for updating us. Glad you've got it sorted.