If I enable auditctl on one machine, can it track the changes or deletes happens on other systems?

Solution Verified - Updated -

Issue

  • A file system mounted on multiple systems and only one machine have auditctl enabled. When a file deleted on other machines, can the system with auditctl enabled detect that a file is missing from its file system? Because the file system is mounted on auditctl enabled machine also.

Environment

  • Red Hat Enterprise Linux (RHEL) 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content