Hi All,
Records deleted from a table say Incident table is stored in Deleted Record. However, what if the record is further deleted from Deleted Records(sys_audit_delete_) table. Is there a way to audit it.
Requirement is to find an Incident number that triggered SLA breach notifications to a set of users in a group but when I look for the incident number in my instance, it is nowhere to be found. I checked in incident archive(Incident was not there). Also, in task_sla table and could see that the incident is recorded in task_sla table as being breached. But when I try to reopen the incident, it is not found, I suspect the incident number has been deleted from the system.
below is the screenshot I get while trying to open the incident from the task_sla table
Thanks in advance
if you go into the sys_audit table, you can see who deleted the incident like this:
Btw, if you don't know who deleted stuff in production, I would recommend looking over the people having access right to delete. Seems to be to many of them.
//Göran
