Sombody deleted my file on linux. I was able to recover the file from snapshot. But I want to find out who deleted it. How do I do that. Is there anyway I can write a perl script to keep log of all the activities.
The short answer is: almost certainly not. If someone deleted a file of yours, there's only three possible explainations:
1. You have the permissions set too loosely. Tighten them up.
2. Someone has your password and logged in as you. Change your password.
3. They're root. Nothing you can do here.