Is there a log of deleted/removed files/directories?
up vote
1
down vote
favorite
After a reboot today, for no apparent reason, I seemingly lost a dir .dotfiles from inside my $HOME dir which held all my config dotfiles.
It will be a huge pain to recreate them but that's what I'm doing now. I have a slightly dated backup to work from.
Is there a log I can view that will show all deleted or removed files and directories, either by me manually, possibly by accident, or by another application maybe?
Ubuntu 14.04LTS
logs data-recovery
asked Feb 3 '17 at 3:08
winchendonsprings
134111
add a comment |
up vote
1
down vote
favorite
After a reboot today, for no apparent reason, I seemingly lost a dir .dotfiles from inside my $HOME dir which held all my config dotfiles.
It will be a huge pain to recreate them but that's what I'm doing now. I have a slightly dated backup to work from.
Is there a log I can view that will show all deleted or removed files and directories, either by me manually, possibly by accident, or by another application maybe?
Ubuntu 14.04LTS
logs data-recovery
asked Feb 3 '17 at 3:08
winchendonsprings
134111
Just a heads up. When you're considering doing any form of recovery, you must avoid writing to the same drive. You probably prevented yourself from restoring anything. A simple deletion is usually easily reversible when there's nothing that overwrote it. And to directly answer your question, if you're asking, I'm assuming you haven't set up anything to track these things so no you won't find any logs of it.
– Julie Pelletier
Feb 3 '17 at 3:23
thank you @JuliePelletier . Today I was remote and didn't have a external drive to boot live from so that wasn't an option. I used testdisk for about half an hour and then grepped the results and mostly everything it grabbed was months old rather than hours
– winchendonsprings
Feb 3 '17 at 3:38
3
Maybe check your bash history. Directories don't usually just go missing.
– hermancain
Feb 3 '17 at 4:40
I wonder if it was really lost, or just, as you say, seemingly lost. Did you rename it? Is it a checkout of a Git repository?
– Kusalananda
Nov 23 at 9:11
add a comment |
up vote
1
down vote
favorite
up vote
1
down vote
favorite
After a reboot today, for no apparent reason, I seemingly lost a dir .dotfiles from inside my $HOME dir which held all my config dotfiles.
It will be a huge pain to recreate them but that's what I'm doing now. I have a slightly dated backup to work from.
Is there a log I can view that will show all deleted or removed files and directories, either by me manually, possibly by accident, or by another application maybe?
Ubuntu 14.04LTS
logs data-recovery
asked Feb 3 '17 at 3:08
winchendonsprings
134111
After a reboot today, for no apparent reason, I seemingly lost a dir .dotfiles from inside my $HOME dir which held all my config dotfiles.
It will be a huge pain to recreate them but that's what I'm doing now. I have a slightly dated backup to work from.
Is there a log I can view that will show all deleted or removed files and directories, either by me manually, possibly by accident, or by another application maybe?
Ubuntu 14.04LTS
logs data-recovery
logs data-recovery
asked Feb 3 '17 at 3:08
winchendonsprings
134111
asked Feb 3 '17 at 3:08
winchendonsprings
134111
asked Feb 3 '17 at 3:08
winchendonsprings
134111
asked Feb 3 '17 at 3:08
winchendonsprings
134111
asked Feb 3 '17 at 3:08
winchendonsprings
134111
134111
Just a heads up. When you're considering doing any form of recovery, you must avoid writing to the same drive. You probably prevented yourself from restoring anything. A simple deletion is usually easily reversible when there's nothing that overwrote it. And to directly answer your question, if you're asking, I'm assuming you haven't set up anything to track these things so no you won't find any logs of it.
– Julie Pelletier
Feb 3 '17 at 3:23
thank you @JuliePelletier . Today I was remote and didn't have a external drive to boot live from so that wasn't an option. I used testdisk for about half an hour and then grepped the results and mostly everything it grabbed was months old rather than hours
– winchendonsprings
Feb 3 '17 at 3:38
3
Maybe check your bash history. Directories don't usually just go missing.
– hermancain
Feb 3 '17 at 4:40
I wonder if it was really lost, or just, as you say, seemingly lost. Did you rename it? Is it a checkout of a Git repository?
– Kusalananda
Nov 23 at 9:11
add a comment |
Just a heads up. When you're considering doing any form of recovery, you must avoid writing to the same drive. You probably prevented yourself from restoring anything. A simple deletion is usually easily reversible when there's nothing that overwrote it. And to directly answer your question, if you're asking, I'm assuming you haven't set up anything to track these things so no you won't find any logs of it.
– Julie Pelletier
Feb 3 '17 at 3:23
thank you @JuliePelletier . Today I was remote and didn't have a external drive to boot live from so that wasn't an option. I used testdisk for about half an hour and then grepped the results and mostly everything it grabbed was months old rather than hours
– winchendonsprings
Feb 3 '17 at 3:38
3
Maybe check your bash history. Directories don't usually just go missing.
– hermancain
Feb 3 '17 at 4:40
I wonder if it was really lost, or just, as you say, seemingly lost. Did you rename it? Is it a checkout of a Git repository?
– Kusalananda
Nov 23 at 9:11
Just a heads up. When you're considering doing any form of recovery, you must avoid writing to the same drive. You probably prevented yourself from restoring anything. A simple deletion is usually easily reversible when there's nothing that overwrote it. And to directly answer your question, if you're asking, I'm assuming you haven't set up anything to track these things so no you won't find any logs of it.
– Julie Pelletier
Feb 3 '17 at 3:23
Just a heads up. When you're considering doing any form of recovery, you must avoid writing to the same drive. You probably prevented yourself from restoring anything. A simple deletion is usually easily reversible when there's nothing that overwrote it. And to directly answer your question, if you're asking, I'm assuming you haven't set up anything to track these things so no you won't find any logs of it.
– Julie Pelletier
Feb 3 '17 at 3:23
thank you @JuliePelletier . Today I was remote and didn't have a external drive to boot live from so that wasn't an option. I used testdisk for about half an hour and then grepped the results and mostly everything it grabbed was months old rather than hours
– winchendonsprings
Feb 3 '17 at 3:38
thank you @JuliePelletier . Today I was remote and didn't have a external drive to boot live from so that wasn't an option. I used testdisk for about half an hour and then grepped the results and mostly everything it grabbed was months old rather than hours
– winchendonsprings
Feb 3 '17 at 3:38
3
3
Maybe check your bash history. Directories don't usually just go missing.
– hermancain
Feb 3 '17 at 4:40
Maybe check your bash history. Directories don't usually just go missing.
– hermancain
Feb 3 '17 at 4:40
I wonder if it was really lost, or just, as you say, seemingly lost. Did you rename it? Is it a checkout of a Git repository?
– Kusalananda
Nov 23 at 9:11
I wonder if it was really lost, or just, as you say, seemingly lost. Did you rename it? Is it a checkout of a Git repository?
– Kusalananda
Nov 23 at 9:11
add a comment |
1 Answer
1
active
oldest
votes
up vote
1
down vote
There is no log of file operations, unless you've explicitly set one up. Setting a log of file operations is unusual and tends to hurt performance.
As hermancain suggested in a comment, you can search your shell history (less ~/.bash_history in the default configuration) and try to find a command that removed or moved the directory. This may have been a command with wildcards, so you might not find the actual directory name in the history, only a wildcard pattern that matches it.
In case the directory has been moved, or you misremembered the path, try locate somefile where somefile is the name of a file that was in this directory, or even part of the name.
Tip: put your dot files under version control.
edited Apr 13 '17 at 12:36
Community♦
1
answered Feb 3 '17 at 23:17
Gilles
523k12610411575
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
1
down vote
There is no log of file operations, unless you've explicitly set one up. Setting a log of file operations is unusual and tends to hurt performance.
As hermancain suggested in a comment, you can search your shell history (less ~/.bash_history in the default configuration) and try to find a command that removed or moved the directory. This may have been a command with wildcards, so you might not find the actual directory name in the history, only a wildcard pattern that matches it.
In case the directory has been moved, or you misremembered the path, try locate somefile where somefile is the name of a file that was in this directory, or even part of the name.
Tip: put your dot files under version control.
edited Apr 13 '17 at 12:36
Community♦
1
answered Feb 3 '17 at 23:17
Gilles
523k12610411575
add a comment |
up vote
1
down vote
There is no log of file operations, unless you've explicitly set one up. Setting a log of file operations is unusual and tends to hurt performance.
As hermancain suggested in a comment, you can search your shell history (less ~/.bash_history in the default configuration) and try to find a command that removed or moved the directory. This may have been a command with wildcards, so you might not find the actual directory name in the history, only a wildcard pattern that matches it.
In case the directory has been moved, or you misremembered the path, try locate somefile where somefile is the name of a file that was in this directory, or even part of the name.
Tip: put your dot files under version control.
edited Apr 13 '17 at 12:36
Community♦
1
answered Feb 3 '17 at 23:17
Gilles
523k12610411575
add a comment |
up vote
1
down vote
up vote
1
down vote
There is no log of file operations, unless you've explicitly set one up. Setting a log of file operations is unusual and tends to hurt performance.
As hermancain suggested in a comment, you can search your shell history (less ~/.bash_history in the default configuration) and try to find a command that removed or moved the directory. This may have been a command with wildcards, so you might not find the actual directory name in the history, only a wildcard pattern that matches it.
In case the directory has been moved, or you misremembered the path, try locate somefile where somefile is the name of a file that was in this directory, or even part of the name.
Tip: put your dot files under version control.
edited Apr 13 '17 at 12:36
Community♦
1
answered Feb 3 '17 at 23:17
Gilles
523k12610411575
There is no log of file operations, unless you've explicitly set one up. Setting a log of file operations is unusual and tends to hurt performance.
As hermancain suggested in a comment, you can search your shell history (less ~/.bash_history in the default configuration) and try to find a command that removed or moved the directory. This may have been a command with wildcards, so you might not find the actual directory name in the history, only a wildcard pattern that matches it.
In case the directory has been moved, or you misremembered the path, try locate somefile where somefile is the name of a file that was in this directory, or even part of the name.
Tip: put your dot files under version control.
edited Apr 13 '17 at 12:36
Community♦
1
answered Feb 3 '17 at 23:17
Gilles
523k12610411575
edited Apr 13 '17 at 12:36
Community♦
1
edited Apr 13 '17 at 12:36
Community♦
1
edited Apr 13 '17 at 12:36
Community♦
1
1
answered Feb 3 '17 at 23:17
Gilles
523k12610411575
answered Feb 3 '17 at 23:17
Gilles
523k12610411575
answered Feb 3 '17 at 23:17
Gilles
523k12610411575
523k12610411575
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f342160%2fis-there-a-log-of-deleted-removed-files-directories%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Just a heads up. When you're considering doing any form of recovery, you must avoid writing to the same drive. You probably prevented yourself from restoring anything. A simple deletion is usually easily reversible when there's nothing that overwrote it. And to directly answer your question, if you're asking, I'm assuming you haven't set up anything to track these things so no you won't find any logs of it.
– Julie Pelletier
Feb 3 '17 at 3:23
thank you @JuliePelletier . Today I was remote and didn't have a external drive to boot live from so that wasn't an option. I used testdisk for about half an hour and then grepped the results and mostly everything it grabbed was months old rather than hours
– winchendonsprings
Feb 3 '17 at 3:38
3
Maybe check your bash history. Directories don't usually just go missing.
– hermancain
Feb 3 '17 at 4:40
I wonder if it was really lost, or just, as you say, seemingly lost. Did you rename it? Is it a checkout of a Git repository?
– Kusalananda
Nov 23 at 9:11