Configure the file-based audit log for soft deletes.
-
Enable the audit log if it is disabled.
$ bin/dsconfig set-log-publisher-prop --publisher-name "File-Based Audit Logger" \ --set enabled:true -
View the audit log.
The
soft-delete-entry-audit-behaviorproperty is set tocommentedby default and provides additional information in comments about the soft-deleted entry that was either created or undeleted.# 11/May/2012:15:33:17.552 -0500; conn=13; op=1 # ds-soft-delete-entry-dn:entryUUID=54716bfd-fbc4-3108-ac37- bf6b1b166e37+uid=user.15,ou=People,dc=example,dc=com dn: uid=user.15,ou=People,dc=example,dc=com changetype: delete