logo
search
SharePoint Document Issues

How to Find Who Deleted an Indexed SharePoint List Column

Maira MehtabMaira Mehtab Sep 30, 2026 868 views

Question details

The user needs to identify which individual or account deleted an indexed column from a SharePoint list.

Product
SharePoint Online
Device & OS
not provided
Scenario
Managing large SharePoint lists where an indexed column has gone missing and the administrator needs to track down the deletion event.
Observed behavior
An indexed column is missing from the SharePoint list, and the standard SharePoint interface does not display a log of who deleted it.
Before you start

Ensure you have Microsoft 365 administrator privileges, as tracking backend deletions requires access to the Microsoft Purview compliance portal and admin center support tools.

Solution 1Recommended

Review Microsoft Purview Audit Logs

Use the Microsoft Purview compliance portal to search for audit events related to SharePoint list changes to identify who performed the deletion.

SharePoint Online does not have a standard built-in feature on the list view to identify who deleted a column. However, administrators can use Microsoft Purview to track these activities.

1
Access the Compliance Portal

Log in to the Microsoft Purview compliance portal using your Microsoft 365 global admin credentials.

2
Navigate to Audit

On the left navigation pane, scroll down and select 'Audit'.

3
Configure the Audit Search

Under the 'Search' tab, specify the date and time range when the column was likely deleted. In the 'Activities' dropdown, select SharePoint list activities.

4
Run Search and Review Results

Click 'Search' to generate the report. Review the returned events for any list schema changes or column deletion actions to identify the user.

Review Microsoft Purview Audit Logs
Audit Log Retention: Audit logging must have been previously turned on for your organization to capture this event. Logs are typically retained for 90 days to 1 year, depending on your licensing.
Free Microsoft Office alternative

Boost Your Document Productivity with WPS Office

While tracking SharePoint list changes requires Microsoft 365 administrative tools, for your daily document creation, editing, and collaboration needs, WPS Office offers a powerful, lightweight, and free alternative to Microsoft Office.

  1. 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
  2. 2. Install WPS Office: Run the downloaded setup file and follow the quick on-screen instructions to install the suite.
  3. 3. Open Your Documents: Launch WPS Office and easily open any existing .docx, .xlsx, or .pptx files directly without losing formatting.
Fully compatible with Microsoft Word, Excel, and PowerPoint document formatsLightweight application that installs quickly and runs smoothly on all devicesFamiliar tabbed interface that makes switching from Microsoft Office seamlessBuilt-in PDF viewing and editing tools to manage all your work in one place
microsoft office alternative - wps office

Frequently Asked Questions

Can regular users see who deleted a SharePoint list column?

No. Standard users do not have access to the Microsoft Purview audit logs or the Microsoft 365 admin center. You must contact your IT administrator to investigate the deletion.

Is it possible to restore a deleted indexed column in SharePoint?

Generally, when a column is deleted from a SharePoint list, the column and its associated data are permanently removed and do not go to the standard SharePoint Recycle Bin. The column must be recreated manually.

Why did my SharePoint list column disappear?

A column can disappear if a user with design or full control permissions deletes it, if a custom view is modified to hide it, or if it was deployed via a site column/content type that was subsequently altered or retracted.