deletion of a page in confluence audit vs database

[maarten breesnee]

Hi,

I am a sysadmin of confluence. I got a question from one of my users to find out who deleted a page. 

I looked in the audit log on that page title and I found a result

it didn't match with their expectations so I digged more and I found an query:

select um.username, c.title, s.spacename, c.lastmoddate
from content c 
join user_mapping um on c.lastmodifier = um.user_key
join spaces s on c.spaceid = s.spaceid
where c.content_status = 'deleted' and contenttype = 'PAGE'
order by username

I specified that on the specific page and it didn't match the audit result. It popped another name and another (earlier) datestamp. How can this be explained?

[Davin Studer · Accepted solution]

When you delete a page the lastmodifier is not set. It is only set when you change the page content. In fact a new version is not created when the page is deleted. The most recent version is simply set to "deleted" for the CONTENT_STATUS. So, your audit log would be the correct place to go for deletions.

[Andrii Tkachenko _BeastieHut_]

Hello!

Also you can try to use https://marketplace.atlassian.com/1220751 plugin to see and store information on who deleted pages in Confluence.

Thank you,

Andrey Tkachenko from BeastieHut

[Erica Moss]

@Andrii Tkachenko _BeastieHut_ Hey, Andrey! Just a heads up: As part of our vendor guidelines, we require that folks identify any affiliation they have with solutions they're sharing with the Community. Additionally, putting the same copy on multiple threads can be perceived as spammy and result in bans. Thanks for your attention to this!

[Andrii Tkachenko _BeastieHut_]

@Community Manager Thank you for notifying this! Was not attentive with the guidelines. Will adhere to it.

Thanks again and sorry for any inconveniences caused.