--- title: "File Share Deleted" description: "Sent when a user deletes a file share from the backup infrastructure. For more information, see Adding File Share. Event ID: 28920 Event message details: File share has been deleted Severity: Warning" canonical: "https://helpcenter.veeam.com/docs/vbr/events/event_28920.html" breadcrumb: "Event Reference > Backup > Unstructured Data Backup > File Share Deleted" dateModified: "2026-10-01" --- # File Share Deleted Sent when a user deletes a file share from the backup infrastructure. For more information, see [Adding File Share](https://helpcenter.veeam.com/docs/backup/vsphere/adding_file_share.html). ## General Information **Event ID**: 28920 **Event message details**: File share `` `` has been deleted **Severity**: Warning ## Parameters

Parameter Name

Description

Example

FileShareID

File share ID.

FileShareID="4217959b-60e9-4ea9-94b7-be7c7899328e"

Type

File share type.

Type="27"

Name

File share name.

Name="\\fs1\Folder"

ChangesXML

Updated data in the XML format.

ChangesXML="<changes><object id="4217959b-60e9-4ea9-94b7-be7c7899328e" name="\\fs1\Folder" /></changes>"

UserName

Name of the user who performed an operation.

UserName="TECH\user1"

VbrHostName

Backup server name. Can be a DNS name, an FQDN or an IP address.

VbrHostName="vbrsrv01.tech.local"

VbrVersion

Veeam Backup & Replication version.

VbrVersion="13.1.0.411"

Version

Event version (service parameter).

Version="1"

Description

Event message details.

Description="File share \\fs1\Folder (CifsShare) has been deleted."

## Syslog Message Example ``` 1 2026-07-25T12:34:29.391715+04:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=28920 FileShareID="4217959b-60e9-4ea9-94b7-be7c7899328e" Type="27" Name="\\fs1\Folder" ChangesXML="" UserName="TECH\user1" VbrHostName="vbrsrv01.tech.local" VbrVersion="13.1.0.411" Version="1" Description="File share \\fs1\Folder (CifsShare) has been deleted."] ```