How to determine who deleted a SANM policy in Spectrum

Products

• Network Observability
• Spectrum

Issue/Introduction

We missed a very important alarm due to a SANM policy was deleted.  Is there any way to know who deleted the SANM policy from Spectrum?

Environment

Spectrum : Any

 

Cause

User accidentally deleting a SANM policy in Spectrum

Resolution

By default, Spectrum does not keep a log of model deletions (this includes SANM policies).

This can be checked and verified by looking at the event in Event Configuration.

 

 

From the Events above, you can see that the logging is not being stored to the Historical Database as the option is not checked by default.

 

You can either check this option for Events that you want stored to the DDMDB (Archive Manager) database or you can enable all user logging here.