SharePoint Audit Log Event ID 15
15: Child object deleted
This is an event from
SharePoint
audit event from
LOGbinder SP
generated by
.
On this page
This event documents object deletion and is very similar to Event ID 19 (object deleted). Click here for discussion and comparison of these 2 events.
Free Security Log Resources by Randy
- Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
- Site: This is the URL of the site generating this event
- User: name of the user who performed the action
- Parent Object
- Type: May say list even in the case of document library
- Subtype: The subtype (e.g. Document Library, Generic Library) of the object, if applicable
- URL: URL of the parent object containing the deleted object
- Title: title of the of the object targeted by this operation
- Child Object:
- Type: of the object deleted
- URL: of the object deleted
Setup PowerShell Audit Log Forwarding in 4 Minutes
This Event Is Produced By
Which Integrates with Your SIEM