just want to double check, does sys_datalog contain *EVERYTHING* from when the server was created? or do certain actions/messages get automatically deleted after a while? i've got history in sys_datalog going back to 2018 when we migrated from an older ispconfig system to new servers. but the logs only go back to last week for the mailserver under the server field, or the mail_user under the db_table field. it looks like a mailbox was wrongly deleted, and looking through the postfix logs, i've narrowed it down to between 10:16am and 10:59am on may 17th, but there's nothing about it in sys_datalog. in fact there's nothing in sys_datalog for the whole day, ( tstamp 1621209600 - 162129600 ) we sold part of our business to another company, and we have given them admin access ( their own admin login) to ispconfig, and directly to the database, to simplify them moving the acquired services to their system (cpanel) (not happy about doing this, but wasn't given a choice) and i'm wondering if they've been messing things up and deleting stuff from sys_datalog to cover their tracks.....
Messages get removed after 30 days except for 'global' messages with server_id = 0. So it's normal that you can't find messages from May 17 now.
ok thanks. guess i'll never know exactly who did what then. maybe it's worth keeping any account/service deletions indefinitely then, eg website, mailbox, dns zone etc. can imagine a client accidentally deleting a website and then denying it was them.
