# File integrity Monitoring with elasticsearch

**URL:** https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250
**Category:** Elasticsearch
**Created:** [May 17, 2018, 4:42am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250 "2018-05-17T04:42:02Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Krunal\_kalaria](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krunal_kalaria/32/23862_2.png) [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)
#### Post date: [May 17, 2018, 4:42am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250/1 "2018-05-17T04:42:02Z")

</div>

Hello Folks,

I want to know any file integrity monitoring solution integration is their with elastic stack ?

I am using OSSEC Wazuh for FIM but i want other open source or any FIM solution that we can integrate with Elastic Stack.

Kindly suggest if anyone know or idea about this.

Thanks & Regards,  
Krunal.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 17, 2018, 6:38am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250/2 "2018-05-17T06:38:06Z")

</div>

What sort of things do you want to do?  
Auditbeat can watch files for changes for eg - [https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-file\_integrity.html](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-file_integrity.html)

---

<div class="post-metadata">

### Author: ![Krunal\_kalaria](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krunal_kalaria/32/23862_2.png) [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)
#### Post date: [May 17, 2018, 6:59am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250/3 "2018-05-17T06:59:17Z")

</div>

Hey @warkolm,

Thanks for reaching out.

I want logs when someone will create a new file , Modify and delete the file and who is the user and path that have been perform above action.

i tried auditbeat but whenever i was create file in some specific path and delete that and modify that file then i did not receive those logs why i don't know.

And i tried with RPM and tar and using yum install but when i was tried with RPM and Yum install then it will give me one error while tried to install template manually no any auditbeat.yml and field.yml find but actually is there.

and when i was tried using tar then it was worked fine but logs are not coming as how i want.

Kindly give me some guidelines and suggestions.

Thanks & Regards,  
Krunal.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 17, 2018, 7:03am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250/4 "2018-05-17T07:03:11Z")

</div>

Perhaps you should start a new thread in the Auditbeat category with some more info and try to get those problems fixed?

---

<div class="post-metadata">

### Author: ![Krunal\_kalaria](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krunal_kalaria/32/23862_2.png) [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)
#### Post date: [May 17, 2018, 9:59am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250/5 "2018-05-17T09:59:18Z")

</div>

Okk now i am using auditbeat in windows machine and it is working fine for me i will explore latter in RHEL server thanks for your help.🙂

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 14, 2018, 9:59am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250/6 "2018-06-14T09:59:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
