Is it possible to track and see who deleted a file or folder on rockstor?
@referee101, there’s no dedicated “history” widget in the WebUI to my knowledge. at the OS level you could probably run something like this (as the root user):
find /home -type f -iname ".*history" -print -exec grep "rm\|mv" {} \;
that should show you the occurrences of the remove or move commands (includes rmdir). If you just use the ‘/’ instead of /home it will include a search of the root user and others that might not be included in the normal /home directory.
But it doesn’t give you an explicit time stamp on when that action occurred … otherwise you might have to install some version control package to keep track (which might be overkill for what you’re trying to find out).
2 Likes