Domains were deleted from Plesk by mistake. Is there any way to find the user who performed this?

Question

Domains were deleted from Plesk by mistake. Is there any way to find the user who performed this?

Answer

All operations performed in Plesk can be found in Plesk Action Log. It includes time, login, IP address, etc.

1. Log into Plesk and go to Tools & Settings > Action Log.
2. Specify the assumed timeframe (when the item was removed) and click Download.
   
3. Look though the log and find an entry like the following:

   203.0.113.2 johndoe [2018-07-13 15:58:47] 'Delete additional domain' ('Client GUID': '73512902-73ec-4ce5-b826-0006090b9e56' => '', 'Domain GUID': 'e1cba795-d13e-4a76-8670-45ca01a343d9' => '', 'Domain Name': 'example.com' => '', 'Login Name': 'johndoe' => '')