How to audit who deleted apps in the Qlik Sense Management Console

[Sonja_Bauernfeind]

This article is specific to Qlik Sense Enterprise on Windows.

Enable Audit Logging:

1. Open the Qlik Sense Management Console
2. Open your Repository in the Repositories menu
3. Enable Audit log level and Qlik Management Console (QMC) log level to at least Info. 
4. Save

For more information on audit logging itself, see: How to enable Audit Logging in Qlik Sense Enterprise on Windows.

To read who has deleted an app:

1. Navigate to either C:\ProgramData\Qlik\Sense\Log\Repository\Trace (default logging folder) or your archived log folder if the log file is from a previous archiving cycle. 
2. Locate and open QLIKSERVER1_Audit_Repository.txt 
3. The line including the delete app action will look like this:
   
   INFO QlikServer1 Audit.Repository.Repository.Core.Repository.AppRepository 56 17eca1c0-6c7a-4ed9-87ac-3184e331f508 DOMAIN\QVservice App delete c0dee38d-9346-1d6c-0e3a-ff6f9033c824 Delete DOMAIN administrator 
   
   In this example, the user administrator has deleted the app with ID c0dee38d-9346-1d6c-0e3a-ff6f9033c824.

Environment

Qlik Sense Enterprise on Windows 

The information in this article is provided as-is and to be used at own discretion. Depending on tool(s) used, customization(s), and/or other factors ongoing support on the solution below may not be provided by Qlik Support.