Alert for deletion/change of knowledge objects

[NatWong]

Hi All,

How do I create an alert when user=admin delete/change any knowledge object.

The background is all security alerts are created using admin and we need to be alerted when those security alerts (reports , alerts ) are changed or deleted.

Regard,
N

[FrankVl]

I'd expect that to be visible in _audit index. Just try creating one and changing / deleting it, to see what it looks like in _audit, so you can build some alerts on that.

Edit:
Had a quick look at it and cannot find obvious traces in _audit. _internal does show some clues though, events with method=POST for changes of reports/alerts and events with method=DELETE for deletes of alerts/reports.