Random image files are deleted from Azure file share which is connected to onpremises windows file servers through azure file sync

Question

We have four file servers in four different locations, which is connected to Azure file storage through Azure File Sync. We have found that random image files are getting deleted from the azure file storage. As we were trying to find out the root cause of the same, we want some kind of log against deleted files from Azure file storage to understand the pattern.
But we could not find any associated log/monitoring which can notify/log deletion of individual file in a file share. Please help us in finding

1. How can we track individual file deletion action in Azure file share(storage)
2. What could be the probable reason for disappearance of the files in Azure file share

Answer 1

@Raju Prasad Thank you for reaching out to Microsoft Q&A. I understand that you want to know how to track individual file operations in Azure File Sotrage, specifically File Deletions and also possible reasons for disappearance of existing file sin the Azure File share.

Answering the first question, you can setup Monitoring for Azure Files which can deliver these details to you:

To collect resource logs, you must create a diagnostic setting. When you create the setting, choose file as the type of storage that you want to enable logs for. Then, specify one of the following categories of operations for which you want to collect logs.

Here are steps for creating Diagnostic settings for collecting the above logs. Regarding your second question, this will need analysis of your environment to check and see what could have caused this. Please reach out to Azure Support Team by creating a support case so they can investigate the same for you. Hope this helps.

Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.