400 DNS Records disappeard

[windowsfan]

I was checking on DNS server and found out that 400 records are missing.
I have 7 Domain Controllers and 7 DNS Servers, all the zones are AD integrated.
How do I find out how the records got deleted or were scavanged? What event ID should I look for?
I know for sure that few of the current records got deleted. I can still ping using FQDN, how that works if record does not exist?

 

[itsp1965]

As DNS servers have their own eventlog did you check there first?

 

[windowsfan]

Yes I did go through event viewer on all DNS servers and found out Event ID 2501. Now I am trying to find out why it scavanged current records.