tonilopes Absent Member.
Absent Member.
1058 views

Deleted files

Hi everybody
I manage a file server and I need to know how do I know who deleted a file within a specified volume in nss.
The name of the user who deleted the file. I looked in the logs of novell, but found nothing.
Best regards.
Labels (2)
0 Likes
8 Replies
Knowledge Partner
Knowledge Partner

Re: Deleted files

On 28.08.2012 14:26, tonilopes wrote:
>
> Hi everybody
> I manage a file server and I need to know how do I know who deleted a
> file within a specified volume in nss.
> The name of the user who deleted the file. I looked in the logs of
> novell, but found nothing.
> Best regards.


The only way to find out is if the file is still salvageable. In the
list of salvageable files (accessible right from the context menu in
windows explorer with the Novell Client installed), the deletor is shown.

If salvage isn't available, then there's no way after the fact. If you
need such functionality, you need to configure isnatl and enable
auditing *beforehand*.

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
CU,
--
Massimo Rosen
Micro Focus Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
hpfeil Absent Member.
Absent Member.

Re: Deleted files

I believe salvage is installed by default on OES servers. At least in my environment I have never had to manually install and configure it separately. So on a windows pc with the novell client > rt click on the folder where the file was > salvage files > it will list all the files from that folder that was deleted, who deleted it, time, etc. If you want to salvage a file I believe you need the WRITE right to the folder you want to bring it back to. Also, if you purged the volume, the file may not be there any more.

-Hans



>>> On 8/28/2012 at 7:31 AM, in message <dS2%r.4558$If2.3940@kovat.provo.novell.com>, Massimo Rosen<mrosenNO@SPAMcfc-it.de> wrote:


On 28.08.2012 14:26, tonilopes wrote:

>
> Hi everybody
> I manage a file server and I need to know how do I know who deleted a
> file within a specified volume in nss.
> The name of the user who deleted the file. I looked in the logs of
> novell, but found nothing.
> Best regards.


The only way to find out is if the file is still salvageable. In the
list of salvageable files (accessible right from the context menu in
windows explorer with the Novell Client installed), the deletor is shown.

If salvage isn't available, then there's no way after the fact. If you
need such functionality, you need to configure isnatl and enable
auditing *beforehand*.

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
Knowledge Partner
Knowledge Partner

Re: Deleted files

On 28.08.2012 15:44, Hans wrote:
> I believe salvage is installed by default on OES servers. At least in my
> environment I have never had to manually install and configure it separately.


Salvage != Auditing. Read what I wrote again, slowly. 😉

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
CU,
--
Massimo Rosen
Micro Focus Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
tonilopes Absent Member.
Absent Member.

Re: Deleted files

Hi everybody

Thank you for answers!

Through the client I can really see who deleted the files.
But what I really look for is like an audit. A report.
I can print if I need it.
In volume data, I have a file called data_Inventory.html, but does not show me what I need.

Thank you

Toni
0 Likes
Knowledge Partner
Knowledge Partner

Re: Deleted files

tonilopes;2215681 wrote:
Hi everybody

Thank you for answers!

Through the client I can really see who deleted the files.
But what I really look for is like an audit. A report.
I can print if I need it.
In volume data, I have a file called data_Inventory.html, but does not show me what I need.

Thank you

Toni


Auditing is third-party add-ons. I think Blue Lance may still have something that works on OES Linux, and perhaps Sentinel (although that's very expensive, IMO) from Novell.

Sometimes you're lucky and the Salvage list will suffice, but it's not "guaranteed" to be complete. (ie, if your volume is less than 10% free, then Salvage starts whacking stuff).

Not sure if there's other auditing software out there or not.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Deleted files

On 28.08.2012 17:56, kjhurni wrote:
>
> tonilopes;2215681 Wrote:
>> Hi everybody
>>
>> Thank you for answers!
>>
>> Through the client I can really see who deleted the files.
>> But what I really look for is like an audit. A report.
>> I can print if I need it.
>> In volume data, I have a file called data_Inventory.html, but does not
>> show me what I need.
>>
>> Thank you
>>
>> Toni

>
> Auditing is third-party add-ons.


Uh? Auditing is anything, but certainly not third party, but integral
part of NSS. The tools used to generate reports may or may not be third
party.


> I think Blue Lance may still have
> something that works on OES Linux, and perhaps Sentinel (although that's
> very expensive, IMO) from Novell.


http://www.novell.com/promo/slm/slm25.html

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
CU,
--
Massimo Rosen
Micro Focus Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
tonilopes Absent Member.
Absent Member.

Re: Deleted files

mrosen;2215892 wrote:


> I think Blue Lance may still have
> something that works on OES Linux, and perhaps Sentinel (although that's
> very expensive, IMO) from Novell.


Free, Enterprise-class Log Management Tool | Novell

CU,
--


Hi.
I downloaded the slm, however I am having trouble installing the program.
I can not install the files from the iso. The manual says to run ./Install-slm but can not find that file.
In another forum, I found a topic which says to run /sbin/yast2 live-installer, but show me this: "no such client module live-installer - the search path follows. its does not include the current directory."
I do not know what to do.

I know this is no place to ask this, but do not know how to proceed.

Thank you.

Toni
0 Likes
Knowledge Partner
Knowledge Partner

Re: Deleted files

mrosen;2215892 wrote:
On 28.08.2012 17:56, kjhurni wrote:
>
> tonilopes;2215681 Wrote:
>> Hi everybody
>>
>> Thank you for answers!
>>
>> Through the client I can really see who deleted the files.
>> But what I really look for is like an audit. A report.
>> I can print if I need it.
>> In volume data, I have a file called data_Inventory.html, but does not
>> show me what I need.
>>
>> Thank you
>>
>> Toni

>
> Auditing is third-party add-ons.


Uh? Auditing is anything, but certainly not third party, but integral
part of NSS. The tools used to generate reports may or may not be third
party.


> I think Blue Lance may still have
> something that works on OES Linux, and perhaps Sentinel (although that's
> very expensive, IMO) from Novell.


Free, Enterprise-class Log Management Tool | Novell

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
Untitled Document


Thanks Massimo. Only gotcha on the slm is that it's limited to 25 eps. And when I asked pre-sales tech support, they said that included anything you filtered out. So 25 eps is almost always going to be exceeded (ie, a single login process via Novell client on a few machines can easily pass that mark). Unless the pre-sales guys were wrong and that 25 eps was AFTER filtering.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.