cancel
Showing results for 
Search instead for 
Did you mean: 

EV Audit query question

Berat_Agilis
Level 1

Hi All,

I have stucked in the middle of situation as described below,

I'm planning have results of "who & which" deletetion action taken in EV Archiving,

Example result which i want to get result of : yyyy archive point deleted by Aaaa user.

Query i tried is like ;

DECLARE @ArchiveId varchar(112)
DECLARE @StartDateTime datetime
DECLARE @EndDateTime datetime
SET @ArchiveId = '1B29F35DAA512AC47A64558FDF7A614571110000example.local'
SET @StartDateTime = '2017-10-05 08:27:48'
SET @EndDateTime = '2017-10-05 08:28:37'
CREATE TABLE #ArchiveFolders
(
       VaultEntryId varchar(112)
)
INSERT INTO #ArchiveFolders
SELECT VaultEntryId 
FROM [EnterpriseVaultDirectory].[dbo].[ArchiveFolderView]
WHERE ArchiveVEID = @ArchiveId
SELECT *  FROM [EnterpriseVaultAudit].[dbo].[EVAuditView] 
auditView LEFT JOIN #ArchiveFolders archFolder
ON archFolder.VaultEntryId = auditView.Vault
WHERE AuditDate BETWEEN @StartDateTime and @EndDateTime
AND CategoryName in ('Search', 'Delete')
ORDER BY AuditID
DROP TABLE #ArchiveFolders

This query returns me result of deleted items, however the thing i want to combine this result is "whom archive point"

Capture.PNG

As explained above , Vault section is generated, however generated result is not giving us correct archiving point. with this result it's quite hard to understand taken deletion action.

May i ask your support to get best result according to my request?

0 REPLIES 0