First off, this is why this community is so great. Life gets in the way, and the answer is waiting for me when I get back. Many thanks wluther, newkidd2, garrethcoleman, garrethcoleman, LadaVarga !! You all ROCK!
* Audit Trails is on
* I have used the 2nd report, and this is GREAT! - Though I am not seeing a spot for Node Name, I will flip this to SQL and see if I can add. All I get is the IP Address. I DID Add the username to this, so that shows in a seperate field for easy viewing.
Initially I was looking in the Audit's, I would select Node Removed and then look for the node that was removed trying to find the username attached; but that Node is not there since I was already removed from the DB... I was hoping Audit would hold the info. I started running inventory reports before each weeekend of refreshes (though I wont go over that unless there is an issue or something missing)...
I think the Events - Node removal just shows it was removed or added without the user info. So with no page for the node anymore I was forced to check the Audit.
So it appears I need to watch that Case that was opened.
I do like the first report, it reads just like the events, with no usermame. I will try both reports, turning them to SQL and trying to tie in the Node Name, or the username for each report. But this is Very Good, Awesome Job and all that Jazz!