Customer experience | Sales, Customer Insights,...

Delete audit logs for a specific entity and before a specific date

(1) Share

Report

Posted on by simonsnell

119

I've been able to retrieve Audit log GUIDs which meet criteria of a particular entity and a date prior to, but can't see how to delete them, as Delete method does not support entities of type Audit.

Any thoughts?

I have the same question (0)

All responses (3)

Answers (0)

Suggested answer

Leah Ju Microsoft Employee on at

Like (0)

Report

Hi,

Dataverse auditing supports the deletion of a single record's entire audit history.

https://learn.microsoft.com/en-us/power-platform/admin/manage-dataverse-auditing?WT.mc_id=ppac_inproduct_settings#delete-the-change-history-for-a-record

Please refer to the following:

1.Go to settings > Auditing > Audit Log management.

2.The following page will be opened, and you can select audit logs to delete in the right pane.

I hope you can mark my answer verified if it answer your question! If you have any questions, please feel free to contact me.
Regards,
Leah

Was this reply helpful? Yes No
simonsnell 119 on at

Like (0)

Report

Hi @Leah Ju

Thanks

This will remove ALL of the audit from that particular table. However, I only want to remove audit logs, as an example, for Contacts but before 1/1/2021.

I don't think this is possible.

Was this reply helpful? Yes No
Suggested answer

LuisAvitia 4 on at

Like (0)

Report

Hello
You can use the SDK, create a console to delete the audit and search the audit by Action, Date, or Entity or as needed.

You just have to create the QueryExpression as you require for your audit search and it will delete those records that are obtained.

/// <summary>
/// Creates a BulkDelete job to delete audit record history for a
/// specific action and shows the job created.
/// </summary>
/// <param name="svc">IOrganizationService to use</param>
/// <param name="actionValue">The audit action value</param>
static void BulkDeleteAuditHistoryByAction(IOrganizationService svc, int actionValue)
{
Guid jobId;

var querySet = new QueryExpression(entityName: "audit");
querySet.Criteria.AddCondition(
attributeName: "action",
conditionOperator: ConditionOperator.Equal,
values: actionValue);

var req = new BulkDeleteRequest
{
QuerySet = new QueryExpression[] { querySet },
JobName = $"Bulk Delete of audit records with action = {actionValue}",
SendEmailNotification = false,
ToRecipients = new Guid[] { },
CCRecipients = new Guid[] { },
RecurrencePattern = string.Empty,
StartDateTime = DateTime.UtcNow
};

try
{
var resp = (BulkDeleteResponse)svc.Execute(req);
jobId = resp.JobId;

Entity bulkDeleteJob =
svc.Retrieve(
entityName: "asyncoperation",
id: jobId,
columnSet: new ColumnSet("name", "statecode", "statuscode"));

Console.WriteLine($"Job Name: {bulkDeleteJob["name"]}");
Console.WriteLine($"Job Id: {bulkDeleteJob.Id}");
Console.WriteLine($"State: {bulkDeleteJob.FormattedValues["statecode"]}");
Console.WriteLine($"Status: {bulkDeleteJob.FormattedValues["statuscode"]}");

}
catch (Exception ex)
{
Console.WriteLine(ex.Message);
}
}

https://learn.microsoft.com/en-us/power-apps/developer/data-platform/auditing/delete-audit-data?tabs=sdk#use-bulkdelete-to-delete-audit-data

Was this reply helpful? Yes No