Forum Discussion
Reports/Logs for content being deleted using Retention Policies, Labels, Document Deletion Policies?
VasilMichev We have helped a customer turn on retention policies for their SharePoint file storage. We have some users questioning why some files have been deleted automatically as the retention policy dictates. The questioning comes in because the user believes that they have not applied the tag to these files. We have used the Unified Audit Log to validate things and we see that no retention label was attached to the file and the System Account deleted it.- It would be really handy to see an audit log of deleted files by the retention process so that we could eliminate retention as a reason the file was deleted. Is there a report that would do this now? It has been a couple of years since this post was launched. Thanks.
MicrosoftTom Nohelty in the Audit logs in column AuditData look for "UserType":7 - refer to https://learn.microsoft.com/en-us/purview/audit-log-detailed-properties#usertype-and-userkey-scenarios, it means a custom retention policy deleted the file