3394587 - How to check who deleted BTP role collections?

You found role collections created on BTP were deleted. But the auditlog-viewer service log does not show details about who (or from which IP address) deleted it, just shows about user Client ID.
-----------------------------
  "message": {
    "uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx",
    "user": "client/sb-na-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx",
    "time": "2023-10-05Txx:xx:xx",
    ...
    "success": true,
    "object": {
      "type": "xs_rolecollection2user",
      "id": {
        "tableName": "xs_rolecollection2user",
        "crudType": "DELETE",
        "creationTimestamp": "2023-10-05Txx:xx:xx",
        "user_id": "xxx",
        "rolecollection_identity_zone_id": "xxx
        "rolecollection_name": "xxx"
-----------------------------

• SAP Business Technology Platform Cloud Foundry - BTP CF

technical client created by the XSUAA apiaccess plan, role collection, delete, who deleted the role collection, subaccount addmin, get a token and call the respective APIs, client ID , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , Problem