# Need help for disappearing files

**URL:** <https://help.nextcloud.com/t/need-help-for-disappearing-files/236340>\
**Category:** ℹ️ Support\
**Tags:** nc32, app\_api, data\_loss, groupfolders-app, proxmox, collabora-built-in\
**Created:** [November 24, 2025, 12:17pm UTC](https://help.nextcloud.com/t/need-help-for-disappearing-files/236340 "2025-11-24T12:17:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![stefanogiunchi](https://help.nextcloud.com/letter_avatar/stefanogiunchi/32/6_22734026db12803ebb3e059622ac3534.png) [@stefanogiunchi](https://help.nextcloud.com/u/stefanogiunchi)\
**Post date:** [November 24, 2025, 12:17pm UTC](https://help.nextcloud.com/t/need-help-for-disappearing-files/236340/1 "2025-11-24T12:17:12Z")

</div>

**The Basics**

- Nextcloud Server version _(e.g., 29.x.x)_:
  - `32.0.0`

- Operating system and version _(e.g., Ubuntu 24.04)_:
  - `Rocky 8.10 on Linux Container LXC on Proxmox`

- Web server and version _(e.g, Apache 2.4.25)_:
  - `Apache 2.4.37`

- Reverse proxy and version \_(e.g. nginx 1.27.2)
  - `n/a`

- PHP version _(e.g, 8.3)_:
  - `8.3`

- Is this the first time you’ve seen this error? (Yes / No):
  - `yes`

- When did this problem seem to first start?
  - `two months ago`

- Installation method _(e.g. AlO, NCP, Bare Metal/Archive, etc.)_
  - `archive`

- Are you using CloudfIare, mod\_security, or similar? _(Yes / No)_
  - `mod_security`

### Summary of the issue you are facing:

Two months ago a user found that some files disappeared from a Team Folder.  
I didn’t find any hint on what happened. The files disappeared from the WebUI and from the disk.

I then did this:

- enabled audit log
- enabled backup every 12 hours

15 days ago, another file disappeared. I didn’t find any clue again in the logs.  
I did find these corruption related bugs, so updated all Desktop Clients to 4.0.1:

[https://github.com/nextcloud/desktop/issues/6462](https://github.com/nextcloud/desktop/issues/6462)

> <https://github.com/nextcloud/desktop/issues/7228>
>
> \### ⚠️ Before submitting, please verify the following: ⚠️
> 
> \- \[X\] This is a \*\*b…ug\*\*, not a question or a configuration issue.
> \- \[X\] This issue is \*\*not\*\* already reported on Github (I've searched it).
> \- \[X\] Nextcloud Server and Desktop Client are \*\*up to date\*\*. See \[Server Maintenance and Release Schedule\](https://github.com/nextcloud/server/wiki/Maintenance-and-Release-Schedule) and \[Desktop Releases\](https://nextcloud.com/install/#install-clients) for supported versions.
> \- \[X\] I agree to follow Nextcloud's \[Code of Conduct\](https://nextcloud.com/contribute/code-of-conduct/)
> 
> \### Bug description
> 
> \*\*Scenario:\*\*
> After migrating large Excel files (20+ MB) to a NextCloud instance with Files\_Lock enabled, these files are getting corrupted when users try to work on them.
> 
> The issue occurs intermittently—typically when a user opens an Excel file, makes a change, closes Excel, and clicks "Yes" to save before exiting.
> 
> \*\*Current Setup:\*\*
> NextCloud (NC): 29.0.5
> \*\*Files\_Lock: 29.0.1\*\*
> Client: 3.13.4
> Excel: 2021 (the issue also occurs with Excel 2019)
> 
> \*\*Dev Team:\*\*
> Feel free to use the following spreadsheet for testing (all data has already been obfuscated).
> \[TEST SHEET.zip\](https://github.com/user-attachments/files/17163637/TEST.SHEET.zip)
> 
> 
> 
> 
> 
> \### Steps to reproduce
> 
> 1. Open the excel file
> 2. Change something in the excel file
> 3. Close the file and Click yes on "save before exit"
> 4. Reopen the file right after closing it and do the same process
> 
> 
> After that Excel will trigger a warning saying that the file is corrupted and will ask to recover the file. It may not happen on the first time you proceed with that, but will happen if you repeat the process.
> 
> \### Expected behavior
> 
> Files should not get corrupted
> 
> \### Which files are affected by this bug
> 
> Excel Files
> 
> \### Operating system
> 
> Windows
> 
> \### Which version of the operating system you are running.
> 
> Windows 11
> 
> \### Package
> 
> Official Windows MSI
> 
> \### Nextcloud Server version
> 
> 29.0.5
> 
> \### Nextcloud Desktop Client version
> 
> 3.13.4
> 
> \### Is this bug present after an update or on a fresh install?
> 
> Updated from a minor version (ex. 3.4.2 to 3.4.4)
> 
> \### Are you using the Nextcloud Server Encryption module?
> 
> Encryption is Disabled
> 
> \### Are you using an external user-backend?
> 
> \- \[X\] Default internal user-backend
> \- \[\] LDAP/ Active Directory
> \- \[\] SSO - SAML
> \- \[\] Other
> 
> \### Nextcloud Server logs
> 
> \_No response\_
> 
> \### Additional info
> 
> \_No response\_

One week ago, another file was missing. It has been recovered by backup, but when I watched again the day later, I couldn’t find it again.

This time, I see from backups that it was present saturday night at 0:30 but not in the next backup at 12:30, so it should not be a client issue.

At this point, I have a big doubt: if the filesystem is corrupt and causes lost files, I expect that WebUI still shows the file and maybe gives an error if one tries to open it. The fact that the file is missing from both disk and web, makes me think to an NC problem.

### Steps to replicate it (hint: details matter!):

1. sorry, can’t replicate

### Log entries

#### Nextcloud

```auto
The last access to the file is 2025-11-21 16:06.
The next backup at 00:30, contains the file.
The successive backup at 12:30 does not contain the file, and I have no logs in the meantime 

audit-user-access.log
{"reqId":"aSCNxdSznLK6UVhBB@WExAAAAM0","level":1,"time":"2025-11-21T16:05:25+00:00","remoteAddr":"10.10.16.34","user":"E66E11B5-2DC2-4EC8-BF36-790D22B42ED6","app":"admin_audit","method":"GET","url":"/remote.php/dav/files/E66E11B5-2DC2-4EC8-BF36-790D22B42ED6/QHSE/_Company%20Holding/Formazione/Formazione%20Company%20Holding%20Srl%20Rev.2_24.05.2024.xls","message":"File with id \"577637\" accessed: \"/E66E11B5-2DC2-4EC8-BF36-790D22B42ED6/files/QHSE/_Company Holding/Formazione/Formazione Company Holding Srl Rev.2_24.05.2024.xls\"","userAgent":"Mozilla/5.0 (Windows) mirall/4.0.1 (build 20251027) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"32.0.0.13","clientReqId":"c208381f-c64e-4e94-8861-7ffc648ef47d","data":{"app":"admin_audit"}}
{"reqId":"aSCNzScL5Wfsv72ZQtxzsgAAABM","level":1,"time":"2025-11-21T16:05:33+00:00","remoteAddr":"10.10.16.31","user":"5F383AC9-28A7-4A86-B1E0-865AAEEECFE7","app":"admin_audit","method":"PUT","url":"/remote.php/dav/files/5F383AC9-28A7-4A86-B1E0-865AAEEECFE7/QHSE/_Company%20Holding/Formazione/Formazione%20Company%20Holding%20Srl%20Rev.2_24.05.2024.xls","message":"File with id \"577637\" written to: \"/5F383AC9-28A7-4A86-B1E0-865AAEEECFE7/files/QHSE/_Company Holding/Formazione/Formazione Company Holding Srl Rev.2_24.05.2024.xls\"","userAgent":"Mozilla/5.0 (Windows) mirall/4.0.1 (build 20251027) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"32.0.0.13","clientReqId":"60d65345-e665-4430-8438-374416ed3d9d","data":{"app":"admin_audit"}}
{"reqId":"aSCN4AD3KDa4W4hgs9E1ugAAAJg","level":1,"time":"2025-11-21T16:05:52+00:00","remoteAddr":"192.168.45.25","user":"CCE24ACF-9F81-4B92-B026-EED861BCFDBE","app":"admin_audit","method":"GET","url":"/remote.php/dav/files/CCE24ACF-9F81-4B92-B026-EED861BCFDBE/QHSE/_Company%20Holding/Formazione/Formazione%20Company%20Holding%20Srl%20Rev.2_24.05.2024.xls","message":"File with id \"577637\" accessed: \"/CCE24ACF-9F81-4B92-B026-EED861BCFDBE/files/QHSE/_Company Holding/Formazione/Formazione Company Holding Srl Rev.2_24.05.2024.xls\"","userAgent":"Mozilla/5.0 (Windows) mirall/4.0.1 (build 20251027) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"32.0.0.13","clientReqId":"6f1170c8-4e62-43d7-b2d6-72f8be6c01c6","data":{"app":"admin_audit"}}
{"reqId":"aSCOAdSznLK6UVhBB@WE8QAAAMw","level":1,"time":"2025-11-21T16:06:25+00:00","remoteAddr":"10.10.16.34","user":"E66E11B5-2DC2-4EC8-BF36-790D22B42ED6","app":"admin_audit","method":"GET","url":"/remote.php/dav/files/E66E11B5-2DC2-4EC8-BF36-790D22B42ED6/QHSE/_Company%20Holding/Formazione/Formazione%20Company%20Holding%20Srl%20Rev.2_24.05.2024.xls","message":"File with id \"577637\" accessed: \"/E66E11B5-2DC2-4EC8-BF36-790D22B42ED6/files/QHSE/_Company Holding/Formazione/Formazione Company Holding Srl Rev.2_24.05.2024.xls\"","userAgent":"Mozilla/5.0 (Windows) mirall/4.0.1 (build 20251027) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"32.0.0.13","clientReqId":"e083ffdc-4bfe-4a99-92c3-d67d483e7095","data":{"app":"admin_audit"}}

```

#### Web server / Reverse Proxy

The output of your Apache/nginx/system log in `/var/log/ ____ `:

```auto
access_log-20251123:10.10.16.31 - - [21/Nov/2025:16:06:17 +0000] "PROPFIND /remote.php/dav/files/5F383AC9-28A7-4A86-B1E0-865AAEEECFE7/QHSE/_Company%20Holding/Formazione HTTP/1.1" 207 916 "-" "Mozilla/5.0 (Windows) mirall/4.0.1 (build 20251027) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)"
access_log-20251123:10.10.16.34 - - [21/Nov/2025:16:06:25 +0000] "PROPFIND /remote.php/dav/files/E66E11B5-2DC2-4EC8-BF36-790D22B42ED6/QHSE/_Company%20Holding/Formazione HTTP/1.1" 207 916 "-" "Mozilla/5.0 (Windows) mirall/4.0.1 (build 20251027) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)"
access_log-20251123:10.10.16.34 - - [21/Nov/2025:16:06:25 +0000] "GET /remote.php/dav/files/E66E11B5-2DC2-4EC8-BF36-790D22B42ED6/QHSE/_Company%20Holding/Formazione/Formazione%20Company%20Holding%20Srl%20Rev.2_24.05.2024.xls HTTP/1.1" 200 68096 "-" "Mozilla/5.0 (Windows) mirall/4.0.1 (build 20251027) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)"
access_log-20251123:192.168.45.28 - - [21/Nov/2025:16:06:28 +0000] "PROPFIND /remote.php/dav/files/F36584A4-E2A5-4979-B682-7430AE37F8EF/QHSE/_Company%20Holding/Formazione HTTP/1.1" 207 914 "-" "Mozilla/5.0 (Windows) mirall/4.0.1 (build 20251027) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)"

```

### Configuration

#### Nextcloud

The output of `occ config:list system` or similar is best, but, if not possible, the contents of your `config.php` file from `/path/to/nextcloud` is fine (make sure to remove any identifiable information!):

```auto
{
    "system": {
        "instanceid": " ***REMOVED SENSITIVE VALUE***",
        "passwordsalt": " ***REMOVED SENSITIVE VALUE***",
        "secret": " ***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "box.xxxxxxxxx.com"
        ],
        "datadirectory": " ***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "32.0.0.13",
        "overwrite.cli.url": "http:\/\/box.xxxxxxxxx.com",
        "dbname": " ***REMOVED SENSITIVE VALUE***",
        "dbhost": " ***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": " ***REMOVED SENSITIVE VALUE***",
        "dbpassword": " ***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "mail_from_address": " ***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": " ***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": " ***REMOVED SENSITIVE VALUE***",
        "mail_send_plaintext_only": true,
        "mail_smtpauth": false,
        "mail_smtpsecure": "",
        "ldapIgnoreNamingRules": false,
        "ldapProviderFactory": "OCA\\User_LDAP\\LDAPProviderFactory",
        "debug": false,
        "maintenance": false,
        "theme": "",
        "loglevel": 1,
        "skeletondirectory": "",
        "default_phone_region": "IT",
        "memcache.local": "\\OC\\Memcache\\APCu",
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "maintenance_window_start": 1,
        "redis": {
            "host": " ***REMOVED SENSITIVE VALUE***",
            "port": 6379
        },
        "app_install_overwrite": [
            "files_rightclick"
        ],
        "forbidden_filename_basenames": [
            "con",
            "prn",
            "aux",
            "nul",
            "com0",
            "com1",
            "com2",
            "com3",
            "com4",
            "com5",
            "com6",
            "com7",
            "com8",
            "com9",
            "com\u00b9",
            "com\u00b2",
            "com\u00b3",
            "lpt0",
            "lpt1",
            "lpt2",
            "lpt3",
            "lpt4",
            "lpt5",
            "lpt6",
            "lpt7",
            "lpt8",
            "lpt9",
            "lpt\u00b9",
            "lpt\u00b2",
            "lpt\u00b3"
        ],
        "forbidden_filename_characters": [
            "<",
            ">",
            ":",
            "\"",
            "|",
            "?",
            "*",
            "\\",
            "\/"
        ],
        "forbidden_filename_extensions": [
            " ",
            ".",
            ".filepart",
            ".part"
        ]
    }
}

```

#### Apps

The output of `occ app:list` (if possible).

```auto
Enabled:
  - activity: 5.0.0-dev.0
  - admin_audit: 1.22.0
  - app_api: 32.0.0
  - bruteforcesettings: 5.0.0-dev.0
  - circles: 32.0.0
  - cloud_federation_api: 1.16.0
  - comments: 1.22.0
  - contacts: 8.0.2
  - contactsinteraction: 1.13.1
  - dashboard: 7.12.0
  - dav: 1.34.2
  - federatedfilesharing: 1.22.0
  - federation: 1.22.0
  - files: 2.4.0
  - files_accesscontrol: 3.0.0
  - files_downloadlimit: 5.0.0-dev.0
  - files_external: 1.24.0
  - files_pdfviewer: 5.0.0-dev.0
  - files_reminders: 1.5.0
  - files_sharing: 1.24.0
  - files_trashbin: 1.22.0
  - files_versions: 1.25.0
  - firstrunwizard: 5.0.0-dev.0
  - groupfolders: 20.1.1
  - impersonate: 3.0.0
  - logreader: 5.0.0-dev.0
  - lookup_server_connector: 1.20.0
  - notifications: 5.0.0-dev.0
  - oauth2: 1.20.0
  - password_policy: 4.0.0-dev.0
  - photos: 5.0.0-dev.1
  - privacy: 4.0.0-dev.0
  - profile: 1.1.0
  - provisioning_api: 1.22.0
  - recommendations: 5.0.0-dev.0
  - related_resources: 3.0.0-dev.0
  - richdocuments: 9.0.0
  - richdocumentscode: 25.4.504
  - serverinfo: 4.0.0-dev.0
  - settings: 1.15.1
  - sharebymail: 1.22.0
  - support: 4.0.0-dev.0
  - survey_client: 4.0.0-dev.0
  - systemtags: 1.22.0
  - text: 6.0.0-dev.0
  - theming: 2.7.0
  - twofactor_backupcodes: 1.21.0
  - twofactor_nextcloud_notification: 6.0.0-dev.0
  - twofactor_totp: 14.0.0
  - updatenotification: 1.22.0
  - user_ldap: 1.23.0
  - user_status: 1.12.0
  - viewer: 5.0.0-dev.0
  - weather_status: 1.12.0
  - webhook_listeners: 1.3.0
  - workflowengine: 2.14.0
Disabled:
  - encryption: 2.20.0
  - files_rightclick: 0.15.1 (installed 0.15.1)
  - nextcloud_announcements: 4.0.0-dev.0 (installed 1.8.0)
  - suspicious_login: 10.0.0-dev.0

```

Thanks for any help on troubleshooting this problem.

###

---

<div class="post-metadata">

**Author:** ![stefanogiunchi](https://help.nextcloud.com/letter_avatar/stefanogiunchi/32/6_22734026db12803ebb3e059622ac3534.png) [@stefanogiunchi](https://help.nextcloud.com/u/stefanogiunchi)\
**Post date:** [November 24, 2025, 12:25pm UTC](https://help.nextcloud.com/t/need-help-for-disappearing-files/236340/2 "2025-11-24T12:25:24Z")

</div>

I just found this post, which is probably the same:

> [@Files vanish, not a single trace](https://help.nextcloud.com/t/files-vanish-not-a-single-trace/235588):
>
> Files are literally vanishing. No trash, not a single trace. I need to restore them from backup. When done, even not the versioning is intact. The Basics Nextcloud Server version: [25 Autumn](https://nextcloud.com) (32.0.1) Operating system and version: Ubuntu 22.04 Web server and version: Apache/2.4.52 Reverse proxy and version: nginx PHP version (e.g, 8.3): PHP 8.2.29 Is this the first time you’ve seen this error? Yes, since update When did this problem seem to first start? since update to Autumn Installation metho…

---

<div class="post-metadata">

**Author:** ![system](https://help.nextcloud.com/user_avatar/help.nextcloud.com/system/32/29333_2.png) [@system](https://help.nextcloud.com/u/system)\
**Post date:** [February 22, 2026, 12:26pm UTC](https://help.nextcloud.com/t/need-help-for-disappearing-files/236340/3 "2026-02-22T12:26:19Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
