# Gateway Backup Metadata

**URL:** <https://forum.inductiveautomation.com/t/gateway-backup-metadata/31141>\
**Category:** Ignition\
**Created:** [January 8, 2020, 2:10pm UTC](https://forum.inductiveautomation.com/t/gateway-backup-metadata/31141 "2020-01-08T14:10:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tim.schultz](https://avatars.discourse-cdn.com/v4/letter/t/71e660/32.png) [@tim.schultz](https://forum.inductiveautomation.com/u/tim.schultz)\
**Post date:** [January 8, 2020, 2:10pm UTC](https://forum.inductiveautomation.com/t/gateway-backup-metadata/31141/1 "2020-01-08T14:10:53Z")

</div>

Is there a way to tell who made a gateway backup with only the backup file itself? I’m going through some kind of forensic activity, as we had an incident at a plant where a primary gateway reverted from version 7.8.4 to 7.8.2 (but not the backup). This piqued my curiosity, and I’m trying to trace back through what could have happened.

---

<div class="post-metadata">

**Author:** ![grietveld](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/grietveld/32/6984_2.png) [@grietveld](https://forum.inductiveautomation.com/u/grietveld)\
**Post date:** [January 8, 2020, 4:13pm UTC](https://forum.inductiveautomation.com/t/gateway-backup-metadata/31141/2 "2020-01-08T16:13:11Z")

</div>

I know the backupinfo.xml has the time and the version of the backup, but I don’t know of anywhere to find the user that took the backup