How to track lost data

[Furonet]

Hello

Sorry, first of all I'm not a technical guy, just assembled an old pc as server for data sharing on home environment using youtube tutorials...
My problem is that two times I've lost different folders with all the data, and I don't know how to check who did it or where it happens.
I have defined the snapshots in order to avoid this problem in the future, hope it works from now.
Thanks

 

[sretalla]

So, it will be important to understand how the data can be accessed first... if it's only via SMB share (and by root on the server directly... who would only be you), then settings to log in SAMBA would be the way forward. ("log level" as described here: https://www.freebsd.org/cgi/man.cgi?query=smb.conf which you would need to configure with Auxiliary Parameters on the SMB share in TrueNAS)

If you have access coming from more sources (FTP, NFS, SSH, etc.) then you would need to look into something else like auditd (running in a jail)

 

[Furonet]

Hello

I set the SMB by default following this video tutorial, https://www.youtube.com/watch?v=nVRWpV2xyds&t=648s
Then I add a network drive on windows on each pc and logged with the user and password like explained on video.
I am using the nas mainly as a network drive, in order to avoid copying on an USB from one pc to another. There is no info stored on the server directly, is always a copy from local data. I mean lose of info is not a big problem but a nuisance.

Thanks