Forum Discussion

zhaolin's avatar
zhaolin
Copper Contributor
Jun 21, 2023

Service hooks removed issue

Our company has been using Azure DevOps services for almost 1 year now. recently somehow all the existing service hooks across the org were gone. I tried to check the audit logs but not sure what exact filter or search will help to identify what happened. any suggestion? 

azure devops

1 Reply

  • Kidd_Ip's avatar
    Kidd_Ip
    MVP
    Sep 15, 2025

    Try to integrate below:

     

    1. Enable Audit Logging

     

    • Go to Organization Settings > Security > Policies
    • Toggle Log Audit Events to ON
    1. Access Audit Logs
    • Navigate to Organization Settings > Auditing
    • Use the search bar and filters to narrow down the timeframe when the hooks disappeared
    1. Filter by Relevant Actions

    Look for these keywords or action types:

    • "ServiceHook.Delete" — indicates a service hook was removed
    • "ServiceHook.Update" — if someone modified a hook before deletion
    • "ServiceHook.Create" — to compare with previous activity
    • "ServiceHook.*" — wildcard to catch all service hook-related events

     

    1. Check Who Performed the Action

    Each audit entry includes:

    • Timestamp
    • Actor (user or system)
    • Action type
    • Scope (project or org level)

     

Resources