How do I track all the most recent file changes on my UNIX system?

Question

Say, either for a Debian system or a Red Hat one.

possible duplicate of find top 10 latest modified files – Gilles 'SO- stop being evil' Nov 02 '11 at 23:51 — Gilles 'SO- stop being evil', Nov 02 '11 at 23:51

score 4 · Accepted Answer · edited Jan 12 '12 at 16:06

4

For real time monitoring you can use inotify-tools. It can either wait until a certain event occurs, or to run endlessly and report events as they occur. After installing, see man inotifywait for details.

The Debian package has the same name, the Red Hat package too.

edited Jan 12 '12 at 16:06

taffer

1,583

answered Nov 02 '11 at 19:44

manatwork

31,277

score 2 · Answer 2 · answered Nov 02 '11 at 19:29

2

It won't monitor for new changes (unless you make a cron script out of it), but check out find's -cmin/-cnewer/-ctime options.

answered Nov 02 '11 at 19:29

Kevin

40,767

score 1 · Answer 3 · edited Nov 03 '11 at 12:05

1

The open source version of tripwire will do that. See http://sourceforge.net/projects/tripwire/ for more info. You may have to compile it for your particular OS, or maybe there's a package, but it can be set to provide a daily report of files changed.

edited Nov 03 '11 at 12:05

phunehehe

20,240

answered Nov 02 '11 at 20:29

Tim Kennedy

19,697

How do I track all the most recent file changes on my UNIX system?

3 Answers3