What steps should I take next, to investigate this issue without
harming the failed drive further?
Stop using, manipulating, testing, whatever you're doing to the drive immediately.
At this point, all you know is that your RAID array failed. You don't know what in your RAID failed and it could be one of two components:
If it's the enclosure, your drives are likely fine. Continued use of them, even if interrogating them for diagnostics could compromise the RAID table sending your data into oblivion. You can test the enclosure by putting in two more drives; cheap, used ones are fine and they don't have to be large capacity as you're just testing functionality. If things fail again, it's the enclosure.
If it is the drive, you don't want to keep testing them out or attempting data recovery, you could further damage them making recovery impossible.
If the drives are somewhat operational and if possible, make a bit-for-bit clone of your drive to a file. You can use dd
for this task and you will do it for each drive:
$ sudo dd if=/dev/rdiskX of=/path/do/imagefileY.img
You will end up with two image files, one for each disk. rdiskX
is the disk identifier of the disk you're copying. You can then write those images to good disks to attempt to reconstruct your array as many times as you want without the risk of further data loss.
- If the drives are physically damaged, you may still be able to recover them by sending them out to a shop that specializes in this type of recovery. Many times, it's the PCB, the drive motor (the one that spins the platters) or the stepper motor (the one that moves the heads). This company will replace the broken components so that you (or them) will be able to extract the data.
RAID Recovery Software
You mentioned that you don't know what RAID Level you were using.
I have a macOS Server setup which is connected to two RAID (0, I think) systems.
This is not entirely critical. If the drives can be remounted, the RAID table which holds the configuration can be read and recovery can proceed. I have recovered RAID arrays in Windows several times using software made by Stellar Phoenix with excellent results. There are a couple of RAID recovery vendors for Mac, though I haven't used them (because I changed my backup strategy long ago) - take a look at Prosoft Engineering and Easus. I have heard (anecdotally) good things about each.
This brings us to the final point that needs mentioning...
RAID is not a backup!
RAID is for performance and/or redundancy, not for backups. RAID 0, is striping data across at least 2 drives meaning the two drives are "combined" to serve as one big drive and both drives working in tandem means you get twice the performance (two drives reading one file). RAID 1 is mirroring which is great for redundancy and uptime. If a drive fails you continue to function lessening the impact of downtime.
PC Magazine has an excellent write up on the different RAID levels.
Backup Strategy
Going back to what I said about changing my backup strategy a long time ago, I architect everything (in my server rooms) for redundancy. Multiple servers would connect to two mirrored disk arrays that was either RAID 5, RAID 10, or RAID 0+1. Then we had two backups - one that did a differential every day and another that imaged the whole array weekly.
This is overkill for your purposes, but it illustrates the point of not relying on RAID for your backups.
In your case, you can use your RAID enclosure for backup. However, I would also have a cheap USB drive (a second backup) that backed up your system as well. The chances of both failing are much smaller now. I've written several answers on backup strategies: