This is an old revision of the document!

Auditing - Audit a directory

Please be careful before creating rules. It will increase your log file size significantly if too much information to record.

Audit directory access

sudo auditctl -w /production/

The above command will watch any access to the /production folder.