TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
> Trying to determine how to delete particular events from the > database. My issue stems from having been experimenting with > testing the "User Defined" functions and now having a cool > 100,000 port 5190, port 1214, port 1433, etc events in the Since there are multiple tables to deal with that's not a straight forward delete. Something like this should work: ------------------------------------ SELECT eventid INTO #tempevents FROM events WHERE OrigEventName = 'Your custom event' DELETE eventrawdata FROM eventrawdata INNER JOIN #tempevents ON eventrawdata.eventid = #tempevents.eventid DELETE eventupdates FROM eventupdates INNER JOIN #tempevents ON eventupdates.eventid = #tempevents.eventid DELETE eventparams FROM eventparams INNER JOIN #tempevents ON eventparams.eventid = #tempevents.eventid DELETE eventresponse FROM eventresponse INNER JOIN #tempevents ON eventresponse.eventid = #tempevents.eventid DELETE FROM events WHERE OrigEventName = 'Your custom event' DROP TABLE #tempevents SELECT remoteeventid INTO #tempeventsrejected FROM eventsrejected WHERE EventName = 'Your custom event' DELETE eventupdatesrejected FROM eventupdatesrejected INNER JOIN #tempeventsrejected ON eventupdatesrejected.remoteeventid = #tempeventsrejected.remoteeventid DELETE eventparamsrejected FROM eventparamsrejected INNER JOIN #tempeventsrejected ON eventparamsrejected.remoteeventid = #tempeventsrejected.remoteeventid DELETE eventresponserejected FROM eventresponserejected INNER JOIN #tempeventsrejected ON eventresponserejected.remoteeventid = #tempeventsrejected.remoteeventid DELETE FROM eventsrejected WHERE EventName = 'Your custom event' DROP TABLE #tempeventsrejected ----------------------- IIRC SecChkID ties back to events and if you know the id of your custom event, you could probably use that in the WHERE clauses building the temp tables and then the delete from the event tables. Mike Lyman Microsoft Corporate Security Monitoring and Compliance PGP KEYID 0xD7BBADAD
