Recovery & Forensics

SQL Server Log Reader

Read and analyze SQL Server transaction logs from online databases, .ldf log files, and backup files. Generate undo/redo recovery scripts, perform point-in-time analysis, and audit every INSERT, UPDATE, and DELETE with a visual timeline.

Transaction Log Viewer
LSNOperationTableLogin
00003a:0012LOP_INSERT_ROWSdbo.Ordersapp_svc
00003a:0013LOP_MODIFY_ROWdbo.Productsadmin
00003a:0014LOP_DELETE_ROWSdbo.TempDatacleanup_job
00003a:0015LOP_BEGIN_XACTsa
Entries: 12,847 | Transactions: 1,204 | Inserts: 4,821 | Updates: 5,102 | Deletes: 2,924

Log Reader Features

Complete transaction log analysis with recovery script generation and visual timeline.

Transaction Log Analysis

Read transaction logs from online databases using fn_dblog, or from offline .ldf and backup files using fn_dump_dblog. View every INSERT, UPDATE, DELETE, and DDL operation with full details.

Undo & Redo Scripts

Generate T-SQL undo scripts to reverse any transaction, or redo scripts to replay changes. Scripts include proper error handling with BEGIN TRY/CATCH and transaction wrappers.

Point-in-Time Recovery

Restore any table to a specific point in time by generating recovery scripts that undo all committed transactions after your target timestamp.

Visual Timeline

See transaction activity in a color-coded timeline with automatic alert detection for mass deletes (100+ rows) and unusually large transactions (1000+ operations).

Multiple Log Sources

Read from online databases, standalone .ldf files, .mdf data files, or .bak backup files. Switch between sources seamlessly from the toolbar.

Transaction Grouping

Automatically group log entries into logical transactions with insert/update/delete counts, duration, status (committed/rolled back), and affected tables.

Export & Reporting

Export log entries and transactions to CSV, generate recovery SQL scripts, or create dark-themed HTML reports with summary statistics for forensic documentation.

Advanced Filtering

Filter by time range, table name, login name, transaction ID, operation type (INSERT/UPDATE/DELETE), and free-text search across all log entry fields.

System Requirements

OS:Windows 10/11 or Windows Server 2016+
SQL Server:SQL Server 2016+ (fn_dblog / fn_dump_dblog)
Azure:Azure SQL Managed Instance
Permissions:VIEW SERVER STATE, sysadmin for fn_dump_dblog

Recover Data & Investigate Changes in Your Transaction Logs

Read every INSERT, UPDATE, and DELETE from your transaction log. Generate undo scripts, perform point-in-time recovery, and audit data changes with a visual timeline.