Hi All,
Domino does not have log for any deletion.
The only thing that I know, you can see from “User Detail” in database properties.
But the log is really really NOT friendly and NOT meaningful.
Writes: Number of times users and servers created, modified, or deleted documents.
I noticed user has 3 writes.
What does it mean?
Delete 3 docs? writes 2 docs and delete 1 doc ???
I noticed server has 2 writes.
Did the server delete 2 docs?
I want to know how you manage this:
When your CEO questioned you, who has deleted this particular document in this database ???
“Oh… that are the users who has deletion access, sir”
But when all the user said “No, I did not delete it”
What is your next move ???
Give the piece of “user detail” log to your CEO? and let him/her interpret the writes and read as explained in the help?
Cheers,
Ivan.
Subject: How do you find out if user has performed deletion.
Well, until you purchase/download any of the suggested utilites, you could narrow the list of likely deleters by finding out who has delete rights; who was online at the time of deletion (which you can narrow looking at backups); and of these, who modified the dB… Unsatisfactory, but at least this might narrow the likely culprit list.
For future ref, you might also try getting ahold of an API that can track deletions stubs, because the stub will still be floating around and it will contain the last modofoed by ID… (altho this might be the API that is malfuncting in the Adminsitrator referenced by another one of your responders).
Subject: RE: How do you find out if user has performed deletion.
Hi All,
Sorry for late reply, and thank you to all for your advise.
I agree with all the replies. There are always work around,
using the technology called 3rd party tools / addin / other additional software. Other than that, we can use what we called “Customization” / “Enhancement” / “Modification”.
Just wondering, since I was using R4, until IBM has released R8, I don’t see this feature in new version.
I don’t think this is nice to say to your boss:
"Sorry boss, to answer CEO’s question, we have two options:
-
quick one, we purchase third party tools.
-
troublesome one, we need to do some modification."
So sad to say this:
The deletion log should be a standard feature that must have in any software.
There would be no surprise if someday top management decide to use other than Domino.
Cheers,
Ivan,
Subject: RE: How do you find out if user has performed deletion.
“The deletion log should be a standard feature that must have in any software.”
Couldn’t disagree more.
Subject: How do you find out if user has performed deletion.
You are absolutely right. I faced the same problem. I could not find any log that tells me who deleted. There is a work around which can help you to some extent as follows.
-
Enable ‘Soft deletions’ in advance properties in last tab of database properties and you can also set ‘Soft delete expire time in hours’.
-
Create a new view ‘Trash’ with the view type as ‘Shared, contains deleted documents’.
From this view you can know who deleted the document from modified by field. Hope this will help.
Subject: How do you find out if user has performed deletion.
There are 3rd party products that track deletions from Domino databases. The one that I think has been around the longest is Extracomm’s SecurTrak. SecurTrac - Monitors and audits your HCL Notes & Domino environment
Subject: How do you find out if user has performed deletion.
If you want to roll your own, just put code in the queryDelete event to write out who did what when to some log db.
I make it a policy to not allow deletions but to allow uses to ‘hide’ docs; some view level action sets a field to ‘hide’ and the view selection excludes those flagged as hidden. I may also ask why they’re hiding the doc so I have a nice record that includes the reason. The hide function can work on one doc or all selected docs.
HTH
Doug
Subject: RE: How do you find out if user has performed deletion.
TriggerHappy is a good server event add-in,
Technote #:1086649
How to analyze questionable deletions in a Notes database
A customer states that there have been deletions in a database, such as a mail file, that no one has actually deleted. Is there a way to analyze if the documents were in fact deleted, and is it possible to find out what the source of the deletion was?
JYR