Highlighted

How to query system console events from query builder

Avatar

Avatar

subramanya_vema

Avatar

subramanya_vema

subramanya_vema

26-04-2018

I have a requirement where a DAM folder got deleted and I need the user-id who deleted it.

I could see the entry from sling events as it was recently deleted. Now the requirement is to get all the historical deletions happened on DAM.

Can some one help me to create this query and get all the historical deletions.

Below is the entry from /system/console/events for the latest deletion.

4/26/2018, 2:35:51 PM org/apache/sling/event/notification/job/FINISHED

:time 7

slingevent:application 36baf009-b6f3-40eb-a7ef-88c9dfb4187e

jcr:created java.util.GregorianCalendar[time=1524749751821,areFieldsSet=true,areAllFieldsSet=true,lenient=false,zone=sun.util.calendar.ZoneInfo[id="GMT-04:00",offset=-14400000,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2018,MONTH=3,WEEK_OF_YEAR=17,WEEK_OF_MONTH=4,DAY_OF_MONTH=26,DAY_OF_YEAR=116,DAY_OF_WEEK=5,DAY_OF_WEEK_IN_MONTH=4,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=35,SECOND=51,MILLISECOND=821,ZONE_OFFSET=-14400000,DST_OFFSET=0]

slingevent:created java.util.GregorianCalendar[time=1524749751798,areFieldsSet=true,areAllFieldsSet=true,lenient=false,zone=sun.util.calendar.ZoneInfo[id="GMT-04:00",offset=-14400000,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2018,MONTH=3,WEEK_OF_YEAR=17,WEEK_OF_MONTH=4,DAY_OF_MONTH=26,DAY_OF_YEAR=116,DAY_OF_WEEK=5,DAY_OF_WEEK_IN_MONTH=4,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=35,SECOND=51,MILLISECOND=798,ZONE_OFFSET=-14400000,DST_OFFSET=0]

event.job.queuename <main queue>

1_type remove

event.job.queued.time java.util.GregorianCalendar[time=1524749751798,areFieldsSet=true,areAllFieldsSet=true,lenient=false,zone=sun.util.calendar.ZoneInfo[id="GMT-04:00",offset=-14400000,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2018,MONTH=3,WEEK_OF_YEAR=17,WEEK_OF_MONTH=4,DAY_OF_MONTH=26,DAY_OF_YEAR=116,DAY_OF_WEEK=5,DAY_OF_WEEK_IN_MONTH=4,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=35,SECOND=51,MILLISECOND=798,ZONE_OFFSET=-14400000,DST_OFFSET=0]

jcr:createdBy admin

sling:resourceType slingevent:Job

assets.total 1

slingevent:eventadmin true

slingevent:eventId 2018/4/26/9/35/36baf009-b6f3-40eb-a7ef-88c9dfb4187e_3699

event.job.application 36baf009-b6f3-40eb-a7ef-88c9dfb4187e

event.job.retries 10

event.topics org/apache/sling/event/notification/job/FINISHED

event.job.started.time java.util.GregorianCalendar[time=1524749751830,areFieldsSet=true,areAllFieldsSet=true,lenient=true,zone=sun.util.calendar.ZoneInfo[id="America/New_York",offset=-18000000,dstSavings=3600000,useDaylight=true,transitions=235,lastRule=java.util.SimpleTimeZone[id=America/New_York,offset=-18000000,dstSavings=3600000,useDaylight=true,startYear=0,startMode=3,startMonth=2,startDay=8,startDayOfWeek=1,startTime=7200000,startTimeMode=0,endMode=3,endMonth=10,endDay=1,endDayOfWeek=1,endTime=7200000,endTimeMode=0]],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2018,MONTH=3,WEEK_OF_YEAR=17,WEEK_OF_MONTH=4,DAY_OF_MONTH=26,DAY_OF_YEAR=116,DAY_OF_WEEK=5,DAY_OF_WEEK_IN_MONTH=4,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=35,SECOND=51,MILLISECOND=830,ZONE_OFFSET=-18000000,DST_OFFSET=3600000]

jcr:primaryType slingevent:Job

event.job.retrycount 0

event.job.topic com/adobe/cq/collection/update/job

timestamp 1524749751850

1_path /content/dam/Dacia/master/placeholder1.jpg

Replies

Highlighted

Avatar

Avatar

Prashanth_Gouda

Avatar

Prashanth_Gouda

Prashanth_Gouda

26-04-2018

Hi Subramanya,

You can find all the audit logs related to DAM in CRXDE @ /var/audit/com.day.cq.dam/content/dam

Hope it will be helpful.

Thanks,

Prashanth