SOLVED

Searching for a deleted file across multiple SharePoint Online recycle bins

%3CLINGO-SUB%20id%3D%22lingo-sub-792596%22%20slang%3D%22en-US%22%3ESearching%20for%20a%20deleted%20file%20across%20multiple%20SharePoint%20Online%20recycle%20bins%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-792596%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20a%20method%20to%20search%20for%20a%20deleted%20file%20across%20multiple%20site%20collections%20recycle%20bins%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EScenario%3A%20User%20deletes%20a%20file%2C%20submits%20a%20help%20desk%20ticket%2C%20but%20has%20no%20idea%20where%20they%20were%20when%20they%20deleted%20the%20file%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20tried%20Content%20Search%20in%20the%20Security%20%26amp%3B%20Compliance%20Centre%20and%20it%20looks%20like%20it%20can%20find%20deleted%20emails%20but%20not%20SharePoint%20docs%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Emany%20thanks%3C%2FP%3E%3CP%3EDarren%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-792596%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EFiles%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-792605%22%20slang%3D%22en-US%22%3ERe%3A%20Searching%20for%20a%20deleted%20file%20across%20multiple%20SharePoint%20Online%20recycle%20bins%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-792605%22%20slang%3D%22en-US%22%3EPerhaps%20do%20a%20unified%20audit%20log%20search%20-%20%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%2Funifiedauditlog%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%2Funifiedauditlog%3C%2FA%3E-%20for%20activity%20'deleted%20file'%20-%20then%20filter%20on%20the%20user%20who%20did%20the%20deletion.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-792707%22%20slang%3D%22en-US%22%3ERe%3A%20Searching%20for%20a%20deleted%20file%20across%20multiple%20SharePoint%20Online%20recycle%20bins%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-792707%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F506%22%20target%3D%22_blank%22%3E%40Rob%20Ellis%3C%2FA%3E%26nbsp%3Bthank%20you%20very%20much%2C%20it%20worked%20a%20treat!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Is there a method to search for a deleted file across multiple site collections recycle bins?

 

Scenario: User deletes a file, submits a help desk ticket, but has no idea where they were when they deleted the file

 

I've tried Content Search in the Security & Compliance Centre and it looks like it can find deleted emails but not SharePoint docs

 

many thanks

Darren

 

2 Replies
Highlighted
Best Response confirmed by Darren O'Malley (New Contributor)
Solution
Perhaps do a unified audit log search - https://protection.office.com/unifiedauditlog - for activity 'deleted file' - then filter on the user who did the deletion.
Highlighted

@Rob Ellis thank you very much, it worked a treat!