We've had a space go to archive mode a few times, affecting its functionality. Unfortunately, I'm trying to find the actor so we can advise corrective action. (Not malicious, just inadvertent).
I've checked the audit log and have tried to find a correlating event, but am coming up empty. Is this something that can be looked up at all?