@vmartinr, Sorry I missed your reply. Everything is in the CM database. Cloudera does not remove the contents of the database, so I don't know what would have hapened to your database files for CM. Perhaps check command history on that host. Check auditd log if you have it enabled... Perhaps MySQL's community might be able to help with forensics.
... View more