Scheduled Report for Deleted Files Across Google Drive #
You may want to create an audit report of the number of deleted files per week.
This report may show unusual activity or mass deletion. Google Workspace Admin Console allows you to recover deleted files within the last 25 days. Having the ability to detect mass deletion early can be helpful if a restore is required.
Set up a scheduled report #
Launch GAT+ using a Google Workspace Super Admin account or a GAT+ Delegated auditor account.
Navigate to Drive > Events > Apply custom filter
In the filter
- Type – Event type search
- Event type – Delete
- File type – Any (you can select any specific type if needed)
- Date (relative) – in the last x days – 7
Result #
You can “click on apply” and view the result – for all files deleted in the last 7 days.
Default Google action #
By default when the file is deleted and is the Bin/Trash in MyDrive, the file will be automatically deleted after 30 days.
Set up as a scheduled report #
Outcome #
Every week this report will run and produce a Google Spreadsheet containing the details of the files deleted in the last 7 days.
