Without the Audit Logger module, you can't tell who deleted them. That's why subledger batches should be automatically posted, and never touched by users.

The only way to track down those entries is to go through the AR and AP posting journals. As Jay said, figuring out who deleted the batches is tricky. You could try looking at the GLBTCH.AUDTUSER field for the G/L batches in question. That's the only record left behind when a batch is deleted.

Finding the entries would also be made easier if you had a backup of your database available to you the day after (or of) that the AR and AP batches were posted.

And take Jay's advice, post the GL batches when they are created.

Thank y'all your help is really appreciate