If I enable auditctl on one machine, can it track the changes or deletes happens on other systems?

Solution Verified - Updated -

Issue

  • A file system mounted on multiple systems and only one machine have auditctl enabled. When a file deleted on other machines, can the system with auditctl enabled detect that a file is missing from its file system? Because the file system is mounted on auditctl enabled machine also.

Environment

  • Red Hat Enterprise Linux (RHEL) 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.