Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Patton3214

macrumors newbie
Original poster
Aug 21, 2014
1
0
Hello everyone,

I recently lost a USB that contained about 2,000 photos. I'm not sure if it was stolen or lost, and it would help me greatly if I could determine when I last had it in my Mac Air OSX 10.9.4. I'm fairly computer illiterate, but I eventually (after realizing usbdeview is for windows) found info online saying you could find that info in the Console. (another website I found explains the codes- I got that down)

I went to Console, and eventually found the system.log and the als.org. Some sites said to search in the private/var/log but I was denied access (I am the only one who uses my computer). At any rate, I found what I was looking for, except the data ended on Aug. 14th, which excludes the prior three crucial (11th,12th,13th) days that I really need to see. (It is fair to ask why it took me a week to do this search, and the answer is I simply had no idea this was possible until this morning.)

So, I tried to figure out if that info was permanently deleted, or if there was a way I could find it. Some places said the Mac 'rotates' data, or stores it in compressed zip files elsewhere. At any rate, it didn't work, or I can't find them, and now the system.logs (there are 7) that I was able to see a few minutes ago I no longer have access to- it says I do not have permission. So, I fear that I've just mucked things up, perhaps inadvertently deleting the only info I really need. But, I really have no idea. The only thing I know for sure is, if I can access the files for those days, and find out the last time the USB was connected, I will have a shot at narrowing down the possible suspects and/or personal stupidity that have robbed me of over two years worth of well-culled and well-crafted photos of my travels and family, and that mean very much to me.

I know this is a long shot, but my options are few: does anyone know how long Console system logs are kept? Are they gone for good after a certain # of days? Can I retrieve them? Why is the Mac denying me permission to my own files? Do I need to fix that before I can retrieve earlier system.logs? Am I asking the right questions?

I realize this email is probably breaking forum etiquette, as I just signed up, and have no Mac-based knowledge to contribute to your community. It is not my intention to be rude, but (and as you can probably tell from above) I don't really know what I'm doing, and time is of the essence for me to figure out when I last had that USB in.

Some of you may wonder why I haven't found the answer to these questions in the forum; I am looking now, but frankly find myself baffled. If anyone can provide any assistance in this matter it would be much appreciated.
Sincerely,
Patton3214
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.