Hi everyone.

In the last days I lost randomly lots of data, no critical one, but I can't figure out, what its causing the data loss.

Mainly movies and tv shows were deleted randomly and I do know know, how ths happens.

File Acitivity shows nothing. Potential Docker container which can cause this issues are, Sonarr, radarr, overseer, plex and jellyfin.

I've checked every app, I couldn't find out what it is causing th issue. No hardlinkes were used (this was my first attempt, that I was deleting the hardfiles and all links will gone too, but that was not the case, no hardlinks used)

attached the diagnostic files, (maybe there is an hardware issue).

Its driving me nuts, that i've lost almost all my media content and I cannot replicate the issue

homeservercs-diagnostics-20250615-1046.zip

Things like this are typically caused by having the server exposed to the internet, and being hacked, or having a media container doing clean up.

51 minutes ago, JorgeB said:

Things like this are typically caused by having the server exposed to the internet, and being hacked, or having a media container doing clean up.

That should not be the case. NAS is not accassable over the Internet, there are only two ports open (one is Plex and one is Unraid Connects). In plex its not allowed to delete files. How can i check if there is a cleanup with deletion (which should not be the case) in plex and jellyfin? Strange is that its the same containers im running since years without issues. Only thing is, what I did recently I've installed/configured Sonnar and Radarr, but also this containers should not delete stuff by their own. Especially that the deleted files are still flagged existing in sonarr, unless i start an re-scan

Other than that, the server is only accessable via tailscale and ive checked the logs, no access during the time, where files have been deleted

Edited June 15, 20251 yr by ChrisCross

1 hour ago, ChrisCross said:

How can i check if there is a cleanup with deletion

Check the logs for each container, usually it will detail what its doing (sonarr and radarr in particular)

10 minutes ago, Michael_P said:

Check the logs for each container, usually it will detail what its doing (sonarr and radarr in particular)

Thank you I couln't find anything in the radarr,sonarr,plex, sabnz logs in regards to delete, move, etc. so this is super strange.

First I thought it was in regards to activating Hard Links in sonarr / radarr, but I've deactivate it very quickly. An this shouldn't impact my already importing and existing files into sonarr/radarr (which are also all deleted). Plex do not has the right to delete files and I was not able to find anything in the logs.

Do you think anything is cased by the unraid update 7.1.3? But then again. There are some files in the folder which where not deleted, so it was not the complete folder? So my guess is that there is any settings in sonarr/radarr/ overseer which is causing the issue... but I can't find out what is causing the behaviour. Even new reloaded files in sonarr where deleted, some not

I also created an .bin folder for sonarr/radarr, but its empty. As by my research all files which where deleted by them should be moved to the bin folder

Edited June 15, 20251 yr by ChrisCross

29 minutes ago, ChrisCross said:

o you think anything is cased by the unraid update 7.1.3?

Almost certainly not.

Hi Everyone,

and it happened again. I've checked every docker container, which has access to this folder, like sonarr,radarr,plex, jellyfin, overseerr etc. but I couldn't find out anything in relates to move, remove, delete etc.

Only file activity is showing that the files were removed, so my last guess that the HDD is dead is also wrong. There must be something, which activly delete these files. Is there any way to find out on unraid level, which process triggers the deletion?

9 hours ago, ChrisCross said:

Is there any way to find out on unraid level, which process triggers the deletion?

Don't think so, disable all the containers for a few days and retest, if that stops the issue start enabling them one by one and retest.

4 hours ago, JorgeB said:

Don't think so, disable all the containers for a few days and retest, if that stops the issue start enabling them one by one and retest.

thanks I will try that out after finishing clamAV. I do not think there is a virus or anything on my server, but just in case.