How to Use the Office 365 Audit Log to Find Out Who Deleted Messages in a Mailbox
Exchange Online sends its mailbox audit records to the Office 365 audit log. You can search the log to discover who deleted messages from mailboxes, normally only an issue when delegates are involved.