Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Knowledge Partner Knowledge Partner
Knowledge Partner
313 views

Finding files deleted on a specific date?

OES 2018 SP2.  NSS file system.  We had a user who accidentally deleted files on one of our servers.  The problem is that the deleted files are scattered across the volume and it is large.  We are restoring them whenever someone finds an empty folder that should contain files.  Is there a quick way to find which files were deleted?  I know the date it happened.

--
Ken
Knowledge Partner

Create and vote for enhancements in the Idea Exchange forums!
Don't forget to Like helpful posts and mark Solutions!
0 Likes
5 Replies
Micro Focus Contributor
Micro Focus Contributor

Have a look at "Salvaging" Deleted Files on NSS Volumes from these OES 2018 documentation links:

Section 11.1.2, Salvaging a Deleted File
https://www.novell.com/documentation/open-enterprise-server-2018/stor_filesys_lx/data/bak20j0.html#bak25p0

Section 11.2.2, Using the Novell Client
https://www.novell.com/documentation/open-enterprise-server-2018/stor_filesys_lx/data/bqq4w30.html#bv4wmjj
0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Sorry, I did not explain that well enough.  We know how to use Salvage.  And we can restore the deleted files using Salvage or get them from our backups.  But Salvage or a restore from backups require us to know which files are missing.  The issue is that the files were deleted from random folders scattered across the volume and we don't know which folders are now missing files.  So I'm looking for a way to scan the entire volume and search for files deleted on a specific date.

--
Ken
Knowledge Partner

Create and vote for enhancements in the Idea Exchange forums!
Don't forget to Like helpful posts and mark Solutions!
0 Likes
Micro Focus Contributor
Micro Focus Contributor

If the NSS Auditing Engine was already running, you might be able to determine this by using VLOG to search.

References:

https://support.microfocus.com/kb/doc.php?id=7016863#

https://www.novell.com/documentation/open-enterprise-server-2018/mgmt_nss_vlog_lx/data/bo299y5.html#vlog_opt

0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Years ago (or better decade 😊) I used this tool from Novell cooltools:

https://community.microfocus.com/t5/OES-Tips-Information/Salvage-98-for-NetWare/ta-p/1779326

Don't know if still works with modern MF client, but worth a try.

0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

sputil --purge --set -a 3m --volname ZEMPF

sputil --purge --exec --dry-run --list-files

 

will list all files on volume ZEMPF deleted 3 minutes or longer ago. With a little grepping and sorting you'll get an idea where you'll have to salvage.

 

 

If you like it: like it.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.