Something weird happened (I should blame me as I am solarwinds person, but I am not the only one with high level permissions.) around the middle of November (15th) a drive was added from a server that's been in live production for some time.
I am trying to find out who, what, where, how or why the drive was added, but looking at alerts, logs, events, traps and message centre during this time period and have found no reference to this drive being added.
As sated, we could say it's my fault as I am the one typically developing solarwinds, but it would be nice to know what happened to the drive.
I feel if I don't have an event from it, I can't prove what happened to it.