How can I monitor a specific file on tripwire?

Posted February 11, 2016 4k views
Linux BasicsDigitalOcean ArticlesLinux Commands

Let´s say that we have a file on “/etc/”. I would like to monitor this specific file with tripwire and make it generate form me a report if any changes are made on the file. Also, I would like tripwire to generate a report every 15 minutes. The report filename should have date and time on it.

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Submit an Answer
1 answer

Hey there redesbr,

We have a tutorial on setting up tripwire that will get you most of the way there:

After getting it up and running, it is just a matter of configuring it to match your specific needs.

DigitalOcean TechOps

by Justin Ellingwood
Although it is possible to guard your server environment against attacks, it is important to be able to detect whether an intruder does manage to compromise your security. Tripwire is a tool that can be used to detect changes in the filesystem that may indicate that an unauthorized person has entered and modified files. In this guide, we will discuss how to install and configure tripwire on an Ubuntu 12.04 VPS.