Master Linux File Search: locate vs. find – Fast Tips and Advanced Options

Linux offers several powerful file‑search utilities; this article focuses on locate and find , describing their characteristics, underlying mechanisms, and practical usage.

locate command

locate queries a pre‑built index stored in /var/lib/mlocate/mlocate.db. The index is refreshed automatically by a daily cron job or manually with updatedb. If the database file is missing, locate stops working until the index is rebuilt or the system is rebooted.

Key characteristics:

Very fast because it searches the index rather than the live filesystem.

Supports fuzzy matching.

Not real‑time; results reflect the last index update.

Searches full file paths, not just filenames.

Only returns files in directories where the user has read and execute permissions, enhancing security.

Common options (shown without the leading dash for brevity):

-i   # case‑insensitive search
-n   # limit output to the first N matches
-r   # enable regular‑expression matching

find command

find performs real‑time searches by traversing the specified directory tree. Unlike locate, it does not rely on a pre‑built index, making it slower but more up‑to‑date and extremely flexible.

Typical syntax:

find [OPTION]... [search_path] [search_criteria] [action]

If search_path is omitted, the current directory is used. If no criteria are given, all files under the path are matched. The default action is to print the pathname.

Search criteria

Depth control : -maxdepth N limits the maximum depth, -mindepth N sets the minimum depth.

Name and inode :

-name PATTERN      # exact name, supports *, ?, [], [^]
-iname PATTERN     # case‑insensitive name
-inum N            # match inode number
-samefile NAME     # find hard links (same inode)

Owner and group :

-user USERNAME   # files owned by USERNAME
-group GROUPNAME  # files belonging to GROUPNAME
-uid UID          # files with specific UID
-gid GID          # files with specific GID
-nouser           # files without an owner
-nogroup          # files without a group

File type :

-type f   # regular file
-type d   # directory
-type l   # symbolic link
-type s   # socket
-type b   # block device
-type c   # character device
-type p   # FIFO/pipe

Size :

-size [+|-]N[UNIT]   # N can be k, M, G, c (bytes); + means greater than, - means less than

Time stamps (in days unless a minute‑based option is used):

-atime [+|-]N   # access time
-mtime [+|-]N   # modification time
-ctime [+|-]N   # status change time

Minute‑based equivalents: -amin , -mmin , -cmin .

Permissions :

-perm MODE        # exact permission match
-mode [+|-]MODE    # + for any matching bit, - for all bits required

Combining criteria using logical operators:

-a (implicit)   # AND
-o               # OR
-not or !        # NOT
# Example: find . -nouser -o -nogroup

Actions

-print

(default) – display the pathname. -delete – remove matched files without prompting. -ls – list files in long format (similar to ls -l). -fls FILE – write the long listing to FILE.

Redirect output with > FILE or >> FILE. -ok COMMAND \\; – run COMMAND on each file interactively. -exec COMMAND \\; – run COMMAND on each file non‑interactively.

Use {} within COMMAND to represent the current file name.

Parameter substitution with xargs

The xargs utility builds command‑line arguments from standard input, allowing commands that do not accept piped input to process many files efficiently.

Example: find /etc/ -name "*.sh" | xargs ls -l When a command cannot handle an extremely large number of arguments (e.g., touch with >30 000 arguments), xargs can split the list: echo {1..30000} | xargs touch These tools together provide a comprehensive toolbox for locating files quickly (locate) or performing precise, real‑time searches with complex criteria (find).