When a sandbox is unexpectedly deleted in Salesforce, it can be difficult to determine who performed the action and when. This article explains how to use the Setup Audit Trail to identify the user who deleted a sandbox and the date and time of the deletion. The Setup Audit Trail records setup changes in your Salesforce org for up to 180 days, including sandbox deletion events.
To identify who deleted a sandbox, download your organization's Setup Audit Trail and search for "Deleted sandbox" in the Action column. The Setup Audit Trail retains setup history for up to 180 days.
Steps to Identify the Deleted Sandbox
If a sandbox was deleted within the last 180 days, the Action column includes details similar to:
Deleted sandbox, name: <SandboxName>, sandboxid: <SandboxSetupPageId>, sandboxOrgId: <SandboxOrgId>, deleted by: <UserId>
Monitor Setup Changes — Salesforce Help
000380391

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.