How about this open source tool? http://stackoverflow.com/questions/10527936/using-inotify-to-keep-track-of-all-files-in-a-system
with kind regards Carsten Otte System z firmware development / Boeblingen lab --- Every revolution was first a thought in one man's mind; and when the same thought occurs to another man, it is the key to that era. - Ralph Waldo Emerson, Essays: First Series, 1841 "Shan, Rita" <Rita.Shan@penfed .org> To Sent by: Linux on LINUX-390@vm.marist.edu, 390 Port cc <linux-...@vm.mar ist.edu> Subject Linux file updates by timestamp and userid 13.03.2014 23:32 Please respond to Linux on 390 Port <linux-...@vm.mar ist.edu> Could anyone kindly provide information on how we can monitor/log zLinux file updates by timestamp and by user ID? We have a number of staff maintaining zLinux system all with sudo privilege, we need to have a way to track file updates by date/time/user-ID. Does AIDE provides these kind of detailed level information? What kind of overhead it will generate if we turned it on? Is there an inexpensive vendor tool for this? Any help is greatly appreciated Rita Email transmitted across the Internet is normally not protected and may be intercepted and viewed by others. Therefore, you should refrain from sending any confidential or private information via unsecured email to PenFed. We will not ask you to send confidential information to us via email, such as your logon ID, password, account numbers, or Social Security number. We prohibit our employees from sending confidential information to you via email that is not encrypted. The recommended document submission method is FAX; a partial list of generic fax numbers can be found < https://www.penfed.org/aboutUs/contactUs.asp#fax> here< https://www.penfed.org/aboutUs/contactUs.asp#fax>.< https://www.penfed.org/aboutUs/contactUs.asp#fax> ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/ ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/