Asset missing - who and when deleted?

Hi everyone,

I was supposed to give support to one of our customers today, but at that moment I noticed that his PC could no longer be found in Syncro.
According to Bitdefender GravityZone, the AntiVirus is still active.

Is there any way to find out who deleted this device from Syncro and when?
As we have a policy to ask for a PIN when uninstalling, one of our technicians must have removed the device and I would have to get to the bottom of it.

Fortunately, we still have AnyDesk installed on all devices, so at least I could get onto the device and reinstall the agent.

Thanks in advance!

1 Like

Hi Pascal, we don’t have a log you can access to check this- but it is a completely reasonable ask. For now, you can restrict users from deleting assets via security groups. If there are any other details you’d like to see added to an audit trail, we’d love to see it posted on the Feature Request board.

There’s probably an event log entry of when it happened (at least if it was the msi installer), could also check the c:\programdata\syncro\logs folder for clues on timeline if those still exist. You could check employee’s browser history for the asset name possibly also.