How to check for deleted record(non-audited)?

[SunnyDimmala]

A record from sysauto_report is deleted, we want to check how it was deleted. Fortunately I have backup in another instance.

My question is where to check and how check it was deleted. Tried searching logs with table name and deleted record sys_id but couldn't find anything.

Please let me know if there is a way find out what happened

[Brian Lancaster]

I just checked in my instance and auditing is not turned of in the sysautom_report table. Unless you have some custom ACLs the only user who can delete a scheduled report need report_scheduler role or admin role.

Edit: If someone has report_admin they have report_scheduler role.

[SunnyDimmala]

Hi Brian,

Unfortunately, sysauto_report table in my instance is not audited. There is no way I can check this in Deleted records. I want to check how it was happened in the first place.

Thanks

[SunnyDimmala]

found the solution in this table :sys_audit_list

[Getsu]

Thank you for adding soling ways, and the name should be sys_aduit.