Is there a StorageGRID log to see when and who deleted a folder within a bucket
Applies to
StorageGRID
Answer
- Audit log in the /var/local/audit/export directory on the admin node will have an
SDELentry - Example:
audit.log:1991-11-07T20:24:00.687689 [AUDT:[RSLT(FC32):SUCS][CNID(UI64):11111111111111][TIME(UI64):12345][SAIP(IPAD):"10.X.X.X"][TLIP(IPAD):"10.X.X.X"][S3AI(CSTR):"123123123123123"][SACC(CSTR):"test"][S3AK(CSTR):"XXXXXXXXXXXXX"][SUSR(CSTR):"urn:sgws:identity::123456778901:root"][SBAI(CSTR):"123123123123123"][SBAC(CSTR):"test-tenant"][S3BK(CSTR):"test-bucket"][S3KY(CSTR):"test3/"][CBID(UI64):0xZXCZXCZXCZXC][UUID(CSTR):"XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXX"][CSIZ(UI64):0][MTME(UI64):11111111111111111][SNID(UI32):11111111][AVER(UI32):10][ATIM(UI64):111111111111111111][ATYP(FC32):SDEL][ANID(UI32):111111111][AMID(FC32):S3RQ][ATID(UI64):11111111111111111]]
Additional Information
additionalInformation_text
