Question

volumes missing

Laserfiche Administration

Updated February 14, 2014

asked on February 13, 2014

We have two repositories. LIVE & TEST. On the server we have data\ volume names \ roll over volumes.

\data\Clerk rollover Clerk1, Clerk2, etc.

\data\Court rollover Court1, Court2, etc.

\data\Payroll....

At this same level of \data\ I have our LFTEST environment volume with its \volumes names\roll over volumes.

\data\LFTEST\Clerk rollover Clerk1, Clerk2, etc.

\data\LFTEST\Court

\data\Payroll .... etc.

This morning staff could not access their images. After some heavy investigating I found that the whole volume (and it's rollovers), we will call it peanut, were moved from \data\peanut to \data\LFTEST\peanut folder! After looking all over LF and running an Audit report I cannot find anything that identifies a LF Administrator or user did this through the Admin Console. As a matter of fact the LF Admin Console was showing the documents were still at their original location.

During my investigation I opened the documents under the \data\LFTEST\peanut and all of our missing documents were there!!! After conversation with our VAR we copied those rollover volumes back to their original location \data\peanut. Everything is working great.

So my question is.... how can this happen? My first thought is someone outside of Laserfiche Admin group, who has rights to that windows server.... moved the folders. The windows server does not tell me who created/moved the peanut folder to its new location when I try to look at the properties. I just want to get to the bottom of this and find out how it got moved so I can prevent something like this from happening to other volumes. Does anyone have thoughts of where I can start looking?

Thanks,
Bonnie

0 0

Replies

replied on February 13, 2014

Are you sure when you created the test environment, you didn't replicate the production database with prod. volume pathing, and then re-path the ones in test through the admin utility? That would physically move them from one location to another and could have caused something like that.

0 0

replied on February 13, 2014

We have been running in this environment (LIVE and TEST) for over a year with no issues until today... Last evening I left about 4:30 and everyone else who's the adminstrator left about the same time. Then this morning we get the call about 8:30 that something strange was happening. And with the 4 of us who are administrator's we were all in the recoop process and none of us did anything in admin....

0 0

replied on February 14, 2014 • Show version history

By default the everyone group will have the "Volume Operations" event checked.

This tracks the following:

So you could potentially be able to track this in an Audit Trail report.

If this is checked and you don't see anything I'd suspect someone was inside your server and accidentally did a click n drag of the file folder into the other folder.

edit: tried to add a formatted text box in but it looked awful. Then I tried to attach the screenshot and it formatted it funky. Hopefully this works though. :)

1 0

replied on February 14, 2014

thank you for your information.

0 0

replied on February 14, 2014

It definitely sounds like someone (hopefully accidentally) moved the volume folders on the backend. Since they are just present as normal files in the windows file system, that's completely out of the Laserfiche Server's control and need to be restricted by standard windows file system security. If they were moved through the Server itself, that would be reflected in the expected paths for the volume definition in the Server and should show up in the Audit Reports that Chris noted above.

0 0

You are not allowed to follow up in this post.

Question

Question

volumes missing

Replies

Sign in to reply to this post.