Nov 14 2016 09:09 AM
Wondering can anyone help with finding or enabling sharepoint so it's logging when someone deletes a site.
We have had an occassion where someone accidently deleted a team site but the audit logs on security compliance doesn't capture this.
Is there somewhere else we can search to see who did it
Nov 14 2016 06:29 PM
SharePoint has always lacked properr auditing, I dont think there is a way to see this currently. @Juan Carlos González Martín might be able to give more insight here.
Nov 14 2016 10:44 PM
Nov 16 2016 05:18 AM
Thanks That one might be a little outside my wheel house to write.
I find it funny that the audit logs does capture the site creation.
I've rasied it via support as a feature request. Seems to me a large security hole
Jun 26 2017 09:58 AM
Hi David,
I just did a quick test, creating a SharePoint Online site and then deleting it. The deletion event was captured in the Audit Log. If this is still an issue for you, could you please provide more detail?
Jul 04 2017 12:02 AM
I believe you need to turn on site collection auditing to capture site deletion activity.
I just tried quick site creation on two different site collections one with site collection auditing enabled and other is not. When I delete those sites, I could get the activity for the site collection auditing enabled one.