# Auditbeat File arrival monitoring

**URL:** https://discuss.elastic.co/t/auditbeat-file-arrival-monitoring/154620
**Category:** Beats
**Tags:** auditbeat
**Created:** [October 30, 2018, 10:33am UTC](https://discuss.elastic.co/t/auditbeat-file-arrival-monitoring/154620 "2018-10-30T10:33:26Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Prabu\_RS](https://avatars.discourse-cdn.com/v4/letter/p/b19c9b/32.png) [@Prabu\_RS](https://discuss.elastic.co/u/Prabu_RS)
#### Post date: [October 30, 2018, 10:33am UTC](https://discuss.elastic.co/t/auditbeat-file-arrival-monitoring/154620/1 "2018-10-30T10:33:26Z")

</div>

Hi ,

I would like to monitor all files in specific directories say for ex /xxx/xxx/\*  
The purpose of the requirement is to monitor file arrival for batch jobs. And also would like to show to the users in kibana dashboard that this is the current files as of now. additionally want to show that what are the files arrived and what are the files missing in that directory based on the current files for as specific day or week . Just want to know is there any way to achieve this requirement in auditbeat ?

Regards  
Prabu

---

<div class="post-metadata">

### Author: ![adrisr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrisr/32/25423_2.png) [@adrisr](https://discuss.elastic.co/u/adrisr)
#### Post date: [October 30, 2018, 10:54am UTC](https://discuss.elastic.co/t/auditbeat-file-arrival-monitoring/154620/2 "2018-10-30T10:54:50Z")

</div>

Hi,

I'm not sure that I fully understand your requirements, but some of them sound difficult/impossible to achieve.

First, what you're looking for is the [File Integrity Module](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-file_integrity.html). Have a close look at the documentation.

This will allow to index events when a file is added or removed to this directory.

Afaik, building a view where you can see all the files that exist at a given moment in time is not going to be possible with the tools offered by Kibana.

---

<div class="post-metadata">

### Author: ![Prabu\_RS](https://avatars.discourse-cdn.com/v4/letter/p/b19c9b/32.png) [@Prabu\_RS](https://discuss.elastic.co/u/Prabu_RS)
#### Post date: [October 31, 2018, 2:00am UTC](https://discuss.elastic.co/t/auditbeat-file-arrival-monitoring/154620/3 "2018-10-31T02:00:20Z")

</div>

Hi Adrian Serrano,

Thanks for replying back..

I understand that file integrity module is used to monitor files changes and its tracks accordingly.  
But my requirement is to list the files in that directory like exact replica of linux filesystem ex ls -l /xx/xxx

Or else, is there any way to alert user via email whenever there is a new file arrived in that directory ?

Regards  
Prabu

---

<div class="post-metadata">

### Author: ![adrisr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrisr/32/25423_2.png) [@adrisr](https://discuss.elastic.co/u/adrisr)
#### Post date: [October 31, 2018, 8:23pm UTC](https://discuss.elastic.co/t/auditbeat-file-arrival-monitoring/154620/4 "2018-10-31T20:23:10Z")

</div>

Have a look at alerting for that

[https://www.elastic.co/products/stack/alerting](https://www.elastic.co/products/stack/alerting)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 21, 2018, 8:37pm UTC](https://discuss.elastic.co/t/auditbeat-file-arrival-monitoring/154620/5 "2018-11-21T20:37:05Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.
