# Monitor file download over 10mb
**URL:** https://discuss.elastic.co/t/monitor-file-download-over-10mb/264766
**Category:** Beats
**Tags:** filebeat, auditbeat
**Created:** [February 18, 2021, 9:24pm UTC](https://discuss.elastic.co/t/monitor-file-download-over-10mb/264766 "2021-02-18T21:24:30Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@stravze](https://discuss.elastic.co/u/stravze)
#### Post date: [February 18, 2021, 9:24pm UTC](https://discuss.elastic.co/t/monitor-file-download-over-10mb/264766/1 "2021-02-18T21:24:31Z")
i'm totally new to Elastic stack and the beats family.
I need to alert on either just files downloaded of files download over 10mb
i've installed filebeat and auditbeat and still can't work how you do this
Any advice would be very welcome
---
### Author:  [@jsoriano](https://discuss.elastic.co/u/jsoriano)
#### Post date: [February 19, 2021, 12:03pm UTC](https://discuss.elastic.co/t/monitor-file-download-over-10mb/264766/2 "2021-02-19T12:03:27Z")
Hey @stravze, welcome to discuss 🙂
Could you give more details on your scenario? For example, are the files downloaded to your servers or from your server?
---
### Author:  [@stravze](https://discuss.elastic.co/u/stravze)
#### Post date: [February 19, 2021, 12:19pm UTC](https://discuss.elastic.co/t/monitor-file-download-over-10mb/264766/3 "2021-02-19T12:19:21Z")
Hiya
I was hoping to monitor /home directory on our linux hosts to monitor all users on that host, and to trigger an alert on any new file downloaded. so for example:
User james
/home/james
downloads the filebeat, this will trigger an alert etc
regards
James
---
### Author:  [@jsoriano](https://discuss.elastic.co/u/jsoriano)
#### Post date: [February 19, 2021, 12:47pm UTC](https://discuss.elastic.co/t/monitor-file-download-over-10mb/264766/4 "2021-02-19T12:47:40Z")
Events coming from the [`file_integrity` module](https://www.elastic.co/guide/en/beats/auditbeat/7.11/auditbeat-module-file_integrity.html) of Auditbeat include the size of the file in the `file.size` field. Would this help in your case?
Once the file size is collected, you can create an alert [Alerting and Actions | Kibana Guide [7.11] | Elastic](https://www.elastic.co/guide/en/kibana/7.11/alerting-getting-started.html)
---
### Author:  [@stravze](https://discuss.elastic.co/u/stravze)
#### Post date: [February 19, 2021, 1:14pm UTC](https://discuss.elastic.co/t/monitor-file-download-over-10mb/264766/5 "2021-02-19T13:14:56Z")
perfect thank you
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 19, 2021, 3:15pm UTC](https://discuss.elastic.co/t/monitor-file-download-over-10mb/264766/6 "2021-03-19T15:15:29Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.