Is there a log, or what log can I scan to find what IP was used to delete an account and what the date was? I am not having any luck in the access-log, too many lines to scan, unless there is a better way to scan that log if it has the info?