Logs:-

resource.type="bigquery_dataset"
protoPayload.resourceName: "client_business_report:revenue"

resource.type="bigquery_dataset"
resource.labels.dataset_id="client_business_report"
protoPayload.methodName:"DeleteTable"

Query:-
SELECT * FROM `prj-production.client_business_report.revenue`
Where client_name="firefly" and EXTRACT(MONTH from `report_date`)=11 and
EXTRACT(YEAR from `report_date`)=2020 and country="FR"

SELECT * FROM `prj-production.client_business_report.revenue`

Where report_date = '2021-2-3'

SELECT * FROM `prj-production.client_business_report.revenue`

Where report_date > '2021-1-31'

Check logs for Service account :-

protoPayload.methodName="SetIamPolicy"
protoPayload.request.policy.bindings.members="serviceAccount:client-business-
reporter@prj-production.iam.gserviceaccount.com"

automation@rackspace-mgcp.iam.gserviceaccount.com 

Restore deleted Table:-

suv@Suvankars-MacBook-Pro[6:01:55]:~$ date -v -25d
Mon Nov 23 18:01:56 IST 2020
suv@Suvankars-MacBook-Pro[6:02:51]:~$ date -v -25d +%s%3N
16061347723N

suv@Suvankars-MacBook-Pro[6:24:33]:~$ bq cp prj-
production:client_business_report.intact_notrans_webxmL_and_revenue_fees@1606134772
3N prj-production:client_business_report.intact_notrans_webxmL_and_revenue_fees
BigQuery error in cp operation: Access Denied: Dataset prj-
production:client_business_report: User does not have bigquery.tables.create
permission for dataset prj-
production:client_business_report.

Find the Datasource associated with the Report

1> Goto the link- here

2> Got to "Edit" tab in upper Right hand corner
3> Go To File -> Report Settings