An Azure service that is used to provision Windows and Linux virtual machines.
Hi @IT Support ,
any delete action will be recorded in the Action Log for instance of the Azure Subscription or Resource Group.
Azure retains activity log events for 90 days and then deletes them.
Activity log entries are usually available for analysis and alerting within 3 to 20 minutes and not in real time.
Source: Activity log in Azure Monitor
If you can't find any Action Log entry for the delete action of the VM it could be because the action happens 90 days before or maybe is not in the Action Log yet.
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten