Expand my Community achievements bar.

How to query system console events from query builder

Avatar

Level 1

I have a requirement where a DAM folder got deleted and I need the user-id who deleted it.

I could see the entry from sling events as it was recently deleted. Now the requirement is to get all the historical deletions happened on DAM.

Can some one help me to create this query and get all the historical deletions.

Below is the entry from /system/console/events for the latest deletion.

4/26/2018, 2:35:51 PM org/apache/sling/event/notification/job/FINISHED

:time 7

slingevent:application 36baf009-b6f3-40eb-a7ef-88c9dfb4187e

jcr:created java.util.GregorianCalendar[time=1524749751821,areFieldsSet=true,areAllFieldsSet=true,lenient=false,zone=sun.util.calendar.ZoneInfo[id="GMT-04:00",offset=-14400000,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2018,MONTH=3,WEEK_OF_YEAR=17,WEEK_OF_MONTH=4,DAY_OF_MONTH=26,DAY_OF_YEAR=116,DAY_OF_WEEK=5,DAY_OF_WEEK_IN_MONTH=4,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=35,SECOND=51,MILLISECOND=821,ZONE_OFFSET=-14400000,DST_OFFSET=0]

slingevent:created java.util.GregorianCalendar[time=1524749751798,areFieldsSet=true,areAllFieldsSet=true,lenient=false,zone=sun.util.calendar.ZoneInfo[id="GMT-04:00",offset=-14400000,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2018,MONTH=3,WEEK_OF_YEAR=17,WEEK_OF_MONTH=4,DAY_OF_MONTH=26,DAY_OF_YEAR=116,DAY_OF_WEEK=5,DAY_OF_WEEK_IN_MONTH=4,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=35,SECOND=51,MILLISECOND=798,ZONE_OFFSET=-14400000,DST_OFFSET=0]

event.job.queuename <main queue>

1_type remove

event.job.queued.time java.util.GregorianCalendar[time=1524749751798,areFieldsSet=true,areAllFieldsSet=true,lenient=false,zone=sun.util.calendar.ZoneInfo[id="GMT-04:00",offset=-14400000,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2018,MONTH=3,WEEK_OF_YEAR=17,WEEK_OF_MONTH=4,DAY_OF_MONTH=26,DAY_OF_YEAR=116,DAY_OF_WEEK=5,DAY_OF_WEEK_IN_MONTH=4,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=35,SECOND=51,MILLISECOND=798,ZONE_OFFSET=-14400000,DST_OFFSET=0]

jcr:createdBy admin

sling:resourceType slingevent:Job

assets.total 1

slingevent:eventadmin true

slingevent:eventId 2018/4/26/9/35/36baf009-b6f3-40eb-a7ef-88c9dfb4187e_3699

event.job.application 36baf009-b6f3-40eb-a7ef-88c9dfb4187e

event.job.retries 10

event.topics org/apache/sling/event/notification/job/FINISHED

event.job.started.time java.util.GregorianCalendar[time=1524749751830,areFieldsSet=true,areAllFieldsSet=true,lenient=true,zone=sun.util.calendar.ZoneInfo[id="America/New_York",offset=-18000000,dstSavings=3600000,useDaylight=true,transitions=235,lastRule=java.util.SimpleTimeZone[id=America/New_York,offset=-18000000,dstSavings=3600000,useDaylight=true,startYear=0,startMode=3,startMonth=2,startDay=8,startDayOfWeek=1,startTime=7200000,startTimeMode=0,endMode=3,endMonth=10,endDay=1,endDayOfWeek=1,endTime=7200000,endTimeMode=0]],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2018,MONTH=3,WEEK_OF_YEAR=17,WEEK_OF_MONTH=4,DAY_OF_MONTH=26,DAY_OF_YEAR=116,DAY_OF_WEEK=5,DAY_OF_WEEK_IN_MONTH=4,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=35,SECOND=51,MILLISECOND=830,ZONE_OFFSET=-18000000,DST_OFFSET=3600000]

jcr:primaryType slingevent:Job

event.job.retrycount 0

event.job.topic com/adobe/cq/collection/update/job

timestamp 1524749751850

1_path /content/dam/Dacia/master/placeholder1.jpg

1 Reply

Avatar

Level 2

Hi Subramanya,

You can find all the audit logs related to DAM in CRXDE @ /var/audit/com.day.cq.dam/content/dam

Hope it will be helpful.

Thanks,

Prashanth