Patent attributes
A method, apparatus, and system for recreating a file that corresponds to a specified point in time (PiT) in a data storage system is disclosed. The particular PiT and the name of the file to be restored may be received from a user. A file system inode structure corresponding to the particular PiT may be recreated based on an inode event stream stored in a journal. One or more disk locations associated with the file to be restored may be determined based on the inode structure corresponding to the particular PiT. A temporary file may be constructed with data read from the one or more disk locations in a storage system of the backup site. Thereafter, the file to be restored may be obtained, which may comprise rolling back data of the temporary file to the particular PiT based on a data stream stored in the journal.