SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
11,131 questions
Need to know who deleted Column in sharepoint online list
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 0%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
gokulnath palani
106
Reputation points
Hi Team,
Good day. I tried to find out the person who deleted the SharePoint online list column. I have used Microsoft Purview Portal but it's not returning any value. Any suggestion on this. I have selected 'Deleted List columns' in Activities and site url in site as shown below
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 61%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
phemanth 13,150 Reputation points Microsoft Vendor2025-01-24T05:54:57.76+00:00 Thanks for using Microsoft Q&A forum and posting your query.
It seems like you're on the right track using the Microsoft Purview Portal.
Here are a few additional steps you can try to identify who deleted the column please confirm us if issue persists:
- Audit Log Search: Ensure that you have the necessary permissions to access audit logs. Go to the Microsoft Purview Portal, navigate to Audit > Search. Make sure you have selected the correct date range and activities. You can try searching for "Deleted column" or "Modified column" activities.
- Check Recycle Bin: Sometimes, deleted columns might appear in the Recycle Bin. Navigate to the Recycle Bin in your SharePoint site and see if the deleted column is listed there. This might give you some clues about who deleted it.
- PowerShell Script: If the above methods don't work, you can use PowerShell to retrieve audit logs. Here's a sample script to get you started:
# Connect to SharePoint Online Connect-SPOService -Url https://yourdomain-admin.sharepoint.com # Get audit logs $auditLogs = Search-UnifiedAuditLog -StartDate (Get-Date).AddDays(-30) -EndDate (Get-Date) -RecordType SharePoint -Operations "Deleted column" # Filter logs for the specific site and column $filteredLogs = $auditLogs | Where-Object { $_.SiteUrl -eq "https://yourdomain.sharepoint.com/sites/yoursite" -and $_.ItemName -eq "ColumnName" } # Output the results $filteredLogs | Format-TableI hope the above steps will resolve the issue, please do let us know if issue persists. Thank you
-
phemanth 13,150 Reputation points Microsoft Vendor
2025-01-27T06:48:16.38+00:00 @gokulnath palani We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sign in to comment
Sign in to answer