How Spam and Deleted Ticket Retention Affects Audit Log Deletion Entries
In Audit Logs > Activity Logs, you may see ticket deletion entries performed by System Automation, and selecting View may show limited or no ticket details. This typically indicates a retention-based cleanup step where BoldDesk permanently removes tickets that were previously moved to Spam Tickets or Deleted Tickets.
This article explains:
- What “System Automation deleted ticket” usually means
- How Spam Tickets and Deleted Tickets retention works
- What can still be restored and what is permanently unrecoverable
Prerequisites
Before an agent reviews ticket deletion entries in Audit Logs > Activity Logs:
- The agent’s role must have the Admin module enabled, and the View audit logs permission must be enabled.
- The agent’s role must have the Tickets module enabled, and the Manage ticket spam and Manage ticket deletion permissions must be enabled.
The Activity Logs list view highlights ticket deletion entries (for example, Event Type = Deleted and Event Category = Ticket) and provides a View link in the Details column for each row.
The View details panel typically shows event metadata (such as the deletion summary, timestamp, event category/type, and client/session information) rather than the original ticket’s content. If the ticket has already been permanently removed, the panel may not include ticket content/history.
System Automation, Retention Rules, and Why Deleted Tickets Have Limited Details
When audit logs show tickets deleted by System Automation, it usually points to a retention-based cleanup step rather than a user manually deleting the ticket at that moment. This section explains how tickets move into non-active buckets (such as Spam or Deleted), how retention windows lead to automatic removal, and why the ticket’s “View” details may be limited once the record has been permanently removed.
1. What System Automation indicates in deletion logs
A “deleted by System Automation” entry commonly represents the final system cleanup after a ticket has already been placed into a non-active bucket (for example, Spam Tickets or Deleted Tickets).
This means:
- The system performed the final removal based on retention rules.
- The original action (manual deletion/mark as spam/automation action) may have occurred earlier.
2. Spam tickets retention behavior
When a ticket is marked as spam (manually or via automation), it is moved to Spam Tickets and removed from active ticket views.
Retention rule: Spam tickets are automatically deleted 30 days after being marked as spam.
3. Deleted tickets retention behavior (soft delete vs permanent removal)
BoldDesk ticket deletion commonly follows this lifecycle:
- Soft delete: The ticket is moved to Deleted Tickets (restorable for a limited time).
- Permanent removal: After the retention window, the ticket may be automatically removed from the system.
Restore rule: Deleted tickets can be restored within 30 days from the Deleted Tickets view.
Permanent delete rule: If a ticket is permanently deleted using Delete Forever, it cannot be recovered.
4. Why “View” shows limited details
Once a ticket has been permanently removed, the underlying record is no longer available. As a result:
- The ticket may no longer appear in Deleted Tickets
- The log entry may not be able to display ticket content/history when you click View
Use Cases
-
High-volume spam cleanup appears as “System Automation”
- A rule or agent marks many tickets as spam.
- After 30 days, BoldDesk removes those spam tickets.
- Activity logs show deletions by System Automation for the final cleanup event.
-
Soft-deleted ticket is restorable, then later becomes unrecoverable
- An agent or automation uses Delete Ticket (soft delete).
- The ticket remains in Deleted Tickets for up to 30 days and can be restored.
- After the retention window, the system removes it permanently and the log may no longer show ticket details.
Troubleshooting Common Errors
Ticket is missing from Deleted Tickets or Spam Tickets
- The ticket may have passed the 30-day retention window and been permanently removed.
- If the audit log shows an older deletion timestamp, verify whether the event occurred more than 30 days ago.
Activity Log shows System Automation, but no admin deleted the ticket
- System Automation typically indicates the retention cleanup step, not the initial action that placed the ticket into Spam or Deleted.
- Check:
- Spam Tickets and Deleted Tickets views (if still within retention)
- Automation rules that mark tickets as spam or soft delete tickets
View link opens, but no ticket details are shown
This usually indicates the ticket record has already been purged and can no longer be displayed.
Frequently Asked Questions
-
What does “Deleted by System Automation” mean in Audit Logs / Activity Logs?
“Deleted by System Automation” typically indicates the final retention cleanup step—the system permanently removed a ticket after it had already been moved into a non-active bucket such as Spam Tickets or Deleted Tickets. The original action (mark as spam, soft delete, or an automation action) usually happened earlier. -
How long are Spam Tickets retained before they are deleted?
When a ticket is marked as spam (manually or through automation), it is moved to Spam Tickets and removed from active views. Spam tickets are automatically deleted 30 days after being marked as spam. -
Can I restore tickets from Deleted Tickets, and when is recovery no longer possible?
Yes. Deleted tickets that were soft deleted can be restored within 30 days from the Deleted Tickets view. If a ticket is permanently deleted using Delete Forever, it is not recoverable. -
Why does the “View” link show limited or no details for some deleted tickets?
If a ticket has already been permanently removed, the underlying record no longer exists in the system. As a result, the ticket may not appear in Deleted Tickets, and the log entry may not be able to display ticket content or history when you select View.
