Last modified: November 09, 2018

This article is written in: 🇺🇸

Finding Files

The find, locate, and which commands are commonly used for file search operations. The find command performs a comprehensive search using attributes such as name, size, and type. locate provides a faster, albeit periodically updated, search by filename. which locates the path of a program's executable within the system's PATH.

Find

The find command is used to locate the specific files and directories based on various criteria like file name, size, modification time, etc. It is one of the powerful commands, capable of handling operations such as search, copy, remove, and modify attributes of files/directories.

The general syntax of the find command is as follows:

find [path...] [expression]

• [path...] refers to where you want to look for. It can be a single directory or multiple directories.
• [expression] refers to the search criteria like name, size, file type, etc.

Commonly Used Options

The find command includes various options, or "flags," that modify its behavior. Below are some commonly used flags:

Finding Files by Name

To find a specific file named error.log in the /var/log/ directory:

find /var/log -name error.log

Suppose there is a file named error.log in /var/log/app/:

/var/log/app/error.log

Finding Files by User

To find all files owned by the user admin in the /home directory:

find /home -user admin

Suppose the admin user owns several files in /home/admin/:

/home/admin/file1.txt
/home/admin/file2.log

Excluding Files by User

To find all files in the /home directory not owned by the user guest:

find /home ! -user guest

If guest owns files in /home/guest/, this command excludes those files.

Finding Files Modified More Recently Than Another File

To find files modified more recently than file2:

find -anewer file2

This finds files updated after file2, such as:

file3
file4

Finding and Deleting Files Modified More Recently Than Another File

To find files newer than file2 and delete them:

find -anewer file2 -exec rm -v {} \;

This will delete files, such as file3 and file4, and print each deleted file's name due to the -v (verbose) option.

Other Examples of find Usage

To find all files larger than 10MB and display them using the ls command:

find / -type f -size +10M -exec ls -lh {} \;

To find and remove all files with the .bak extension in the current directory and its subdirectories:

find . -name "*.bak" -type f -delete

To find all files larger than 2000 blocks (approximately 1MB) and ask the user for permission to remove them:

find $HOME -type f -size +2000 -exec ls -s {} \; -ok rm -f {} \;

🔴 Caution: The find command can be very powerful, but it also poses a risk of unintentional file deletion or modification, especially when combined with -exec or -delete. Always double-check your commands and use -ok instead of -exec when performing critical operations.

Locate

The locate command is a quicker alternative to find for searching filenames in the filesystem. It uses a database (updatedb) that stores references to all files in the filesystem. While faster, it may not always have the most up-to-date information as the database is updated periodically (usually through a nightly cron job).

The general syntax of the locate command is as follows:

locate [option] pattern

• [option] refers to additional parameters that can be passed to locate.
• pattern refers to the file or directory name you are searching for.

Commonly Used Options

Here are some commonly used options with the locate command:

Examples

To find a file called example.txt:

locate example.txt

Suppose example.txt exists in multiple locations:

/home/user/Documents/example.txt
/usr/share/docs/example.txt

Case-Insensitive Search

To find a file called example.txt and ignore case:

locate -i example.txt

This command will return results like:

/home/user/Documents/Example.txt
/usr/share/docs/example.TXT

Limiting the Number of Results

To limit the number of returned results to 5:

locate -l 5 example.txt

The output will show only the first 5 matches found:

/home/user/Documents/example.txt
/usr/share/docs/example.txt
/var/log/example.txt
/tmp/example.txt
/etc/example.txt

Matching Only the Base Name

To match only the base name against the pattern:

locate -b '\example.txt'

This command focuses on the base name, ignoring the directory path:

/home/user/example.txt
/usr/share/example.txt

Searching with Regular Expressions

To search for a regular expression pattern:

locate -r 'ex.*\.txt$'

This command will find files matching the regular expression ex.*\.txt$, such as:

/home/user/Documents/exam.txt
/usr/share/docs/example.txt

Important Note

The locate command is faster than find but might not always show the most up-to-date information. If the file or directory was recently created or deleted, the database might not reflect the change. The database of filenames is typically stored at /var/lib/mlocate/mlocate.db. To update the database manually, use the updatedb command (requires root privileges).

Which

The which command in Unix/Linux is used to locate the executable file associated with a given command. It searches for the executable in directories specified by the PATH environment variable.

The general syntax of the which command is as follows:

which [option] program_name

• [option] refers to additional parameters that can be passed to which.
• program_name is the name of the executable you want to locate.

Commonly Used Options

The which command is used to locate the executable file associated with a given command by searching through the directories listed in the PATH environment variable.

Here are some commonly used options with the which command:

Examples

To find the location of the ls command:

which ls

Output might look like:

/bin/ls

This indicates that the ls executable is located at /bin/ls.

Finding All Instances of an Executable

To find all the locations of the python command:

which -a python

Output might include:

/usr/bin/python
/usr/local/bin/python

This indicates that there are multiple python executables located at /usr/bin/python and /usr/local/bin/python.

Note

The which command only searches for executables in directories specified in the PATH variable. If an executable is located elsewhere, which will not be able to find it. This limitation means that if a binary is not in a directory included in PATH, which will not display it, even if it exists on the system.

Challenges

1. Use the which command to find the location of executable files for tools like cat, ls, reboot, and chmod.
2. Utilize the find command to locate all files in your home directory that are larger than 1GB.
3. Employ find or locate to search for all .mp3 files within your home directory. Which method do you find faster?
4. Find all .txt files in your home directory that contain the string "linux". You might need to use a combination of commands to achieve this.
5. Use the find command to search for all symbolic links within the /usr/bin directory.
6. Display all subdirectories in the /usr/local directory that are owned by the root user.
7. List all files in the /var/log directory that have been modified within the past 24 hours.
8. Use locate to find all files with the .conf extension. Remember that the database may need to be updated.
9. Find all files and directories in your home directory that you have full permission to modify (read, write, and execute).
10. Use which to determine the paths of python3 and pip3. Are they in the same directory? What does this tell you about your Python installation?