RDM is losing data, once again

Hello Steven,

Thank you for contacting us on that matter!

Would it be possible for you to go under Administration -> Deleted Entries and see if your VPN entry can be found there? Also, which version of RDM and what type of Data Source you are currently using?

Best regards,

Hi James,

i already mentioned that there is no deleted entry "also the entry is not withing the "deleted entries" which would allow to restore the entry. "
I was running 2022.1.25.0 till i realized the problem, then i updated to 2022.1.27.0 this morning but didnt help, VPN entry is lost. Datasource is azure sql database

regards,
Steven

Hello Steven,

My apologies for overlooking that fact. I have conducted a few tests on my end in order to find a way to delete the entry without this being logged in the Activity Logs but so far I haven't been able to do it. A way to achieve this without the deletion being logged in RDM would be to delete the entry from the connection table of the SQL Azure database directly.

Are you using multiple vaults in your SQL Azure data source? If so, as a test, would it be possible for you to use the "Multi Vault Search" which can be opened by pressing the F12 key, and search all of your vault for this entry? If you don't remember the exact name of the entry, you can select "Connection Type" in the first dropdown of the search, choose "VPN" and press "Search" to show every entry of that type:


Best regards,

Hi James,

sure delete the entry within the sql directly would explain why the entry is lost without any trace. However only two user using this datasource, i am the owner of the company and my colleague is currently at holiday. I can't imagine my colleague wanting to annoy me within his holiday also since the notebook is still in the office ;)

We dont use multi vaults and i also restored the entry yesterday (to a different path to prevent from any issues while troubleshooting) which is the only one i found by using the multi vault search

reagrds
Steven

Hello Steven,

That would indeed be a strange prank to pull.

Unfortunately, without any logs, the chances of finding what happened are slim.
Do you have access to a backup of your database that was taken before this VPN entry disappeared? If so, would it be possible for you to restore it to a new database, connect to it through RDM, go into the properties of the VPN entry in question, under the "Entry Information" section, and see if you can find the "Entry ID"?

With this information, we might be able to build a script to find this entry on your current database, or at least what happened to it.

Best regards,

Could it be possible that the entry in question was exported and imported in a different vault?

The reason I ask is if you import to a different vault while unchecking the "Change ID" the import becomes a vault-move but looks like a delete in the original vault. Since it's a move there is record of the delete. If you find the entry in the second vault and look at the Entry History will see a Move Vault action with the date/time and user that performed the move. Worth looking into it.

P.S.: Unless you've deleted (or disabled) the triggers deleting the entry via SQL Server will still create a "Delete" status in Deleted Entry.

HI all,

sorry for late response. Unfortunatelly we just have 7 days backups and i already checked the latest backup as soon i found out that the entry is missing.
So there is no way get the entry id. The VPN connection belongs to one of our first customers and it was definitly there on 30.5.

@Stéfane Lavergne
we moved from on premise sql to azure sql around 8 months ago, since then the entry was existing.

unfortunately its not the first time RDM is losing data without any traces (check my previuous threads where RDM was losing credentials by just move entries between folder). I will check sql database manually, for the missing entry and get back to you later

treid to search database by installing management studio searching connections table


regards,
Steven

Hi Steven,

RDM will log to the dbo.ConnectionHistory table all insert/update/delete actions from the dbo.Connections table. That is unless someone with sufficient rights disables the SQL triggers. So, other than malicious activity or you've cleaned/deleted your connection history, we should be able to recover the sessions.

Was the VPN session a child entry? If so we, we need to look at the parent entry since child entries don't exist on their own. This could explain why you're not seeing it in the dbo.ConnectionHistory table directly.

If you execute the following:

SELECT * FROM dbo.Connections WHERE Data LIKE '%VPN RZ%';

and

SELECT * FROM dbo.ConnectionHistory WHERE Data LIKE '%VPN RZ%';

Do you get any rows?

Best regards,

Hi Stéfane,

sorry for late response didnt realized your response. Attached you find the results of the requests. Blurred entries are different customers.

regards,
Steven

Hi Steven,

What happened is still unclear but I would like, if possible, to get to the bottom of the issue. Doing it over this forum thread is somewhat complicated. Would you be available for a remote session so that we can investigate the issue further? If so, I will send you a scheduling link.

Best regards,

Hi Stéfane,

we can go into investigation mid of next week because of our current workload. Feel free to contact me by mail or DM

regards,
Steven

Hi Steven,

I'm on vacation next week so it will have to wait until the week of July 18th. We will be in contact with you via email.

Best regards,

Just had an remote session with the guys from devolutions. There was no data lost, just moved by magic....
Thanks again for your help and support as well as the nice conversation !

PS: Password is changed now, this was necessary anyway because it was a temporary password (since 11 months .... :D )

regards from Germany,
Steven