Who Deleted the Folder in XIR3.1?

[Former Member]

Hello Experts,

We are on XIR3.1 SP4.

One of the folder went missing i.e it is not available neither in CMC or InfoView. I'm not sure if it got deleted by someone or what but I saw it in the morning and when I tried to modify the security of the folder, it errored out with something like "object doesnot exist in the CMS or you dont have enough rights to view it".

I'm now trying to recover this lost folder, meanwhile is there a way to find out if it was deleted by someone or what happened to it?

Thanks in advance...

[Former Member]

There is no way to recover, unless you have a backup. Or if the same folder in other environment.

You can find the information from Auditing, if the that feature is enabled.

[Former Member]

Hi Jawahar, thank you for your reply...

All i need is to find out who deleted a folder or what happened to it as it is currently missing? How do I get this information from the audit Universe?

Thanks again,

[Former Member]

You will be able to get the info who deleted the folder.

Between tables Audit_event and audit_detail, Event_type_id=65543 and object_type='folder'

[Former Member]

Refer the below note

1272045 - How to find out who deleted a folder in Enterprise with Auditing enabled