Forum Discussion

Suraj Padhy's avatar
Suraj Padhy
Copper Contributor
Mar 25, 2018

Reports/Logs for content being deleted using Retention Policies, Labels, Document Deletion Policies?

Hi, I am trying to leverage the delete action in Retention policies, labels and document deletion policies to delete aged content in SharePoint & ODFB environment. On reading through the docs aroun...
VasilMichev's avatar
VasilMichev
MVP
Mar 25, 2018

Nothing is logged, as those are automated processes. And especially in the case of email, this can affect literally thousands of hundreds of items per day in a big organization, so I doubt you will want to go over all of these. For SharePoint/OneDrive content you can use the Disposition review fucntionality: https://support.office.com/en-us/article/overview-of-disposition-reviews-d0c6095b-bfee-4906-a2c7-89c2d7f411c1

 

There's some basic reporting available via Get-DataRetentionReport.

  • Tom Nohelty's avatar
    Tom Nohelty
    Brass Contributor
    May 23, 2022

    VasilMichev We have helped a customer turn on retention policies for their SharePoint file storage.  We have some users questioning why some files have been deleted automatically as the retention policy dictates.  The questioning comes in because the user believes that they have not applied the tag to these files.  We have used the Unified Audit Log to validate things and we see that no retention label was attached to the file and the System Account deleted it.-  It would be really handy to see an audit log of deleted files by the retention process so that we could eliminate retention as a reason the file was deleted.  Is there a report that would do this now?  It has been a couple of years since this post was launched.  Thanks.

    • Martin_Weber1120's avatar
      Martin_Weber1120
      Copper Contributor
      Aug 06, 2023

      Hi All,

      We have similar requirements as Tom Nohelty mentioned already when it comes to Cloud Compliance and Governance.

      Compliance Guys like to verify, if their Compliance Settings (based on Retention Policies) are working and we have to prove, that the Data is deleted, when the Retention Time is over...

      Would be really great to get some insights about logs, when the retention policy kicks in and deletes data at companies. Truly wishful for large Enterprises with heavy Compliance. 

      Any Feedback is welcome to solve such requests.

      Thanks and best regards,

      Martin 

    • Tom Nohelty's avatar
      Tom Nohelty
      Brass Contributor
      May 23, 2022
      Additional info to this issue. In the Unified Audit Log, we are seeing the same System Account that deleted the item also performed activity "changed retention label for a file" about 7 minutes prior to the file being deleted. Any ideas what automated process would change a retention label?