How to view the audit trail of a deleted item?

[joechavez]

Hi,

I turned on auditing, and as long as the item is there, I can see its audit trail. The question is, if the item has been deleted, how can I see its audit trail?

I've created a space called "test", checked a document "work.doc" under the space "test", and I can see the create operation in the audit trail of the space "test". Now, as long as the item "work.doc" exists, its audit trail is there. But once it's been deleted, how can I see who did it? After its deletion, the audit trail of its parent space "test" did not record the delete operation. how come?

Thanks for any info.

joe

[ribz33]

I think its not possible because audittrail save node's uuid in database (see "alf_audit_fact" table in your database )
After you delete node, uuid point to nothing so you are not able to get node properties.

In this case, I'm not sure that audit is best way to do what you want.
Probably you will need to use a rule or a policy to log all node properties in a file when user is deleting node.

I Hope this help you…

[joechavez]

whoa, that makes the whole functionality of audit trail a lot less useful then. I checked in the tables, the log items are there, but there's no way to get them out or generate a report, unless rolling your own…

[andy]

Hi

This is on the improvements list for auditing.

The delete API does not have the parent in the API call - which is what audit records.
This will be fixed up when we update the audit schema to pull out more node references rather than leave then as strings.

Andy