Object delete transactions
Suggest changes
PDFs
You can identify object delete transactions in the audit log by locating API-specific (S3 and Swift) audit messages.
Not all audit messages generated during a delete transaction are listed in the following tables. Only messages required to trace the delete transaction are included.
S3 delete audit messages
| Code | Name | Description | Trace | See |
|---|---|---|---|---|
SDEL |
S3 Delete |
Request made to delete the object from a bucket. |
CBID, S3KY |
Swift delete audit messages
| Code | Name | Description | Trace | See |
|---|---|---|---|---|
WDEL |
Swift Delete |
Request made to delete the object from a container, or the container. |
CBID, WOBJ |
Example: S3 object deletion
When an S3 client deletes an object from a Storage Node (LDR service), an audit message is generated and saved to the audit log.
|
Not all audit messages generated during a delete transaction are listed in the example below. Only those related to the S3 delete transaction (SDEL) are listed. |
SDEL: S3 Delete
Object deletion begins when the client sends a DELETE Object request to an LDR service. The message contains the bucket from which to delete the object and the object's S3 Key, which is used to identify the object.
2017-07-17T21:17:58.959669[AUDT:[RSLT(FC32):SUCS][TIME(UI64):14316][SAIP(IPAD):"10.96.112.29"][S3AI(CSTR):"70899244468554783528"][SACC(CSTR):"test"][S3AK(CSTR):"SGKHyalRU_5cLflqajtaFmxJn946lAWRJfBF33gAOg=="][SUSR(CSTR):"urn:sgws:identity::70899244468554783528:root"][SBAI(CSTR):"70899244468554783528"][SBAC(CSTR):"test"]\[S3BK\(CSTR\):"example"\]\[S3KY\(CSTR\):"testobject-0-7"\][CBID\(UI64\):0x339F21C5A6964D89][CSIZ(UI64):30720][AVER(UI32):10][ATIM(UI64):150032627859669][ATYP\(FC32\):SDEL][ANID(UI32):12086324][AMID(FC32):S3RQ][ATID(UI64):4727861330952970593]]