Find out who deleted the VM in Hyperv

Hi,

Kindly let me know where can we check the logs for VM deletion details and who did it in HyperV. I have checked event id 13003 and HyperV-worker and HyperV-VMMs logs, but didn't get proper information.

In 13003 event ID, shows that VMs is deleted from one SID (S-1-5-83-1-2063782822-1162780032-1510854323-830704), but this SID belongs to replication machine NT VIRTUAL MACHINE\7B02D3A6-9D80-454E-B3CE-0D5AF0AC0C00. what is the meaning of this, is it deleted by its Own or automatically? Kindly help me to find out the same.

Thanks & Regards,

Libish A