Solved

monitor and log every file access on redhat/linux

Posted on 2016-07-23
4
98 Views
Last Modified: 2016-08-06
software suggestions to monitor and log EVERY file access on redhat/linux.
0
Comment
Question by:Xetroximyn
4 Comments
 
LVL 50

Assisted Solution

by:Steve Bink
Steve Bink earned 83 total points
ID: 41726699
The inotify-tools package is what you're looking for.

Note that monitoring *every* file access is going to put a huge load on your server.  Be prepared.
0
 
LVL 61

Assisted Solution

by:gheist
gheist earned 83 total points
ID: 41727398
audit is tool for job.
0
 
LVL 19

Assisted Solution

by:jools
jools earned 83 total points
ID: 41727455
It might be best to configure the service to monitor specific files/directories rather than everything or you will just drown in the noise!
1
 
LVL 25

Accepted Solution

by:
madunix earned 251 total points
ID: 41744775
Use auditd by configuring...
chkconfig auditd on
Add rules to the end of the /etc/audit/audit.rules file
https://www.experts-exchange.com/questions/27972518/Logging-Unix-Linux-Commands.html
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now