https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3807548#M945176 <P>Hello</P> <P>&nbsp;</P> <P>I noticed all policies in one of our domains are deleted!!!</P> <P>&nbsp;</P> <P>Is there a way I can track / check log who deleted the policies?</P> <P>&nbsp;</P> <P>Thank you.</P> Fri, 21 Feb 2020 16:50:59 GMT InTheJuniverse 2020-02-21T16:50:59Z https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3807548#M945176 <P>Hello</P> <P>&nbsp;</P> <P>I noticed all policies in one of our domains are deleted!!!</P> <P>&nbsp;</P> <P>Is there a way I can track / check log who deleted the policies?</P> <P>&nbsp;</P> <P>Thank you.</P> Fri, 21 Feb 2020 16:50:59 GMT https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3807548#M945176 InTheJuniverse 2020-02-21T16:50:59Z https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3808102#M945177 <P>Have you checked the Audit logs located at System&gt;Monitoring&gt;Audit?&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="audit-logs.PNG" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/30800iED08B09C85A7BA87/image-size/large?v=v2&amp;px=999" role="button" title="audit-logs.PNG" alt="audit-logs.PNG" /></span></P> Fri, 22 Feb 2019 23:05:39 GMT https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3808102#M945177 Rahul Govindan 2019-02-22T23:05:39Z https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3811835#M945179 <P>Hello</P> <P>&nbsp;</P> <P>I check but it doesn't show any policy deletion but web page access.</P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 28 Feb 2019 15:18:03 GMT https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3811835#M945179 InTheJuniverse 2019-02-28T15:18:03Z https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3812584#M945181 <P>I just tested this out and it shows me the audit log for Policy delete:</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="policy-delete.PNG" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/31182i2B395919C9735BAF/image-size/large?v=v2&amp;px=999" role="button" title="policy-delete.PNG" alt="policy-delete.PNG" /></span></P> <P>&nbsp;</P> <P>See Line#2. Did you set the right Time window in the top right hand corner?</P> Fri, 01 Mar 2019 15:26:29 GMT https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3812584#M945181 Rahul Govindan 2019-03-01T15:26:29Z https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3812677#M945183 <P>&nbsp;</P> <P>This is it, thank you very much.</P> Fri, 01 Mar 2019 17:59:56 GMT https://community.cisco.com/t5/network-security/fmc-policy-delete-log/m-p/3812677#M945183 InTheJuniverse 2019-03-01T17:59:56Z