01-11-2007
Finding deleted files
One of the files got deleted and i want to find who deleted that file.
I think we can get the list using history command. Could you please let me know how to get the list of rm commands from history and who previously logged in and did that?
Any other suggestions other than history also welcome.
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Is there a Unix tool, like in Novell, to recover accidentally deleted files? (2 Replies)
Discussion started by: kuultak
2 Replies
2. UNIX for Dummies Questions & Answers
I had a user run, by accident, the following line command on our UNIX server:
rm -f /usr/*
This apparently deleted some needed files on your system. Having very limited knowledge in UNIX, I thought I would ask the group if anyone knows how I can recover these file?
The version of UNIX is... (3 Replies)
Discussion started by: mikem
3 Replies
3. AIX
How to recover deleted files in AIX ? (1 Reply)
Discussion started by: vjm
1 Replies
4. Shell Programming and Scripting
Hi,
I have a challenging task,in which i have to find the duplicate files by its name and size,then i need to take anyone of the file.Then i need to open the file and find for more than one pattern and count of that pattern.
Note:These are the samples of two files,but i can have more... (2 Replies)
Discussion started by: jerome Sukumar
2 Replies
5. UNIX for Dummies Questions & Answers
I mistakenly deleted a script from the UNIX server. Is there any command i can type that i will retrieve my script? (3 Replies)
Discussion started by: manna
3 Replies
6. Shell Programming and Scripting
hi,
if i delete a file from /home/san/abc.cpp in linux/unix
and i want to restore it back
how to do that ? (3 Replies)
Discussion started by: mail2sant
3 Replies
7. UNIX for Dummies Questions & Answers
:eek:
I accidently removed some files using 'rm'. Is there any way to retrieve these files if they were deleted through 'rm'? (1 Reply)
Discussion started by: orahi001
1 Replies
8. UNIX for Advanced & Expert Users
Hi All,
I am using Fedora Core and Windows Xp. I deleted all the files from root
directory. When i am trying to restart the computer it showing some grub > prompt. What i will do ? I have lots of data in XP OS.
Please help me
i used
# rm * (8 Replies)
Discussion started by: pritish.sas
8 Replies
9. Linux
Hello. I am having a problem and I was wondering if I could get some help from here. I changed into a directory with the cd command and I wanted to delete a folder and all of its subdirectories, so I went ahead and did a rm --recursive * in my current directory to realize that I was in the wrong... (3 Replies)
Discussion started by: jonnydadesigner
3 Replies
10. AIX
Just looking for some guidance on how to figure out who might have deleted some files off one of my systems.
These files are not root owned files so could be deleted by a handful of folks in the group responsible for these files besides the root users.
Anyway I have been tasked with trying to... (1 Reply)
Discussion started by: juredd1
1 Replies
LEARN ABOUT CENTOS
tcl_recordandevalobj
Tcl_RecordAndEvalObj(3) Tcl Library Procedures Tcl_RecordAndEvalObj(3)
__________________________________________________________________________________________________________________________________________________
NAME
Tcl_RecordAndEvalObj - save command on history list before evaluating
SYNOPSIS
#include <tcl.h>
int
Tcl_RecordAndEvalObj(interp, cmdPtr, flags)
ARGUMENTS
Tcl_Interp *interp (in) Tcl interpreter in which to evaluate command.
Tcl_Obj *cmdPtr (in) Points to a Tcl object containing a command (or sequence of commands) to execute.
int flags (in) An OR'ed combination of flag bits. TCL_NO_EVAL means record the command but do not evaluate it.
TCL_EVAL_GLOBAL means evaluate the command at global level instead of the current stack level.
_________________________________________________________________
DESCRIPTION
Tcl_RecordAndEvalObj is invoked to record a command as an event on the history list and then execute it using Tcl_EvalObjEx (or Tcl_Global-
EvalObj if the TCL_EVAL_GLOBAL bit is set in flags). It returns a completion code such as TCL_OK just like Tcl_EvalObjEx, as well as a
result object containing additional information (a result value or error message) that can be retrieved using Tcl_GetObjResult. If you do
not want the command recorded on the history list then you should invoke Tcl_EvalObjEx instead of Tcl_RecordAndEvalObj. Normally
Tcl_RecordAndEvalObj is only called with top-level commands typed by the user, since the purpose of history is to allow the user to re-
issue recently invoked commands. If the flags argument contains the TCL_NO_EVAL bit then the command is recorded without being evaluated.
SEE ALSO
Tcl_EvalObjEx, Tcl_GetObjResult
KEYWORDS
command, event, execute, history, interpreter, object, record
Tcl 8.0 Tcl_RecordAndEvalObj(3)