# Monitoring other software repository download **URL:** \ **Category:** Beats\ **Created:** [February 14, 2017, 12:44pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033 "2017-02-14T12:44:29Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Rajasekaran\_Mari](https://avatars.discourse-cdn.com/v4/letter/r/53a042/32.png) [@Rajasekaran\_Mari](https://discuss.elastic.co/u/Rajasekaran_Mari)\ **Post date:** [February 14, 2017, 12:44pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033/1 "2017-02-14T12:44:29Z")
how to write a script to Attempts to download software from a location other than the cloud software repository. Beats ---
**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Post date:** [February 15, 2017, 8:51pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033/2 "2017-02-15T20:51:58Z")
I don't understand the question. Please provide more details. ---
**Author:** ![Rajasekaran\_Mari](https://avatars.discourse-cdn.com/v4/letter/r/53a042/32.png) [@Rajasekaran\_Mari](https://discuss.elastic.co/u/Rajasekaran_Mari)\ **Post date:** [February 20, 2017, 5:16am UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033/3 "2017-02-20T05:16:33Z")
Hi Andrewkroh, i want to write a json script, End users download a software or install a software only using this primary repository \*\*\*-repo-us-east-1, \*\*\*-repo-us-west-2, suppose some users download a software or install a software from some other public repository that time email will alert to me, some users download software from other repository. ---
**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Post date:** [February 20, 2017, 3:40pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033/4 "2017-02-20T15:40:47Z")
What kind of repository access are you talking about? Are you referring to a specific package manager like yum or apt? ---
**Author:** ![Rajasekaran\_Mari](https://avatars.discourse-cdn.com/v4/letter/r/53a042/32.png) [@Rajasekaran\_Mari](https://discuss.elastic.co/u/Rajasekaran_Mari)\ **Post date:** [February 21, 2017, 8:40am UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033/5 "2017-02-21T08:40:50Z")
Hi, Only Yum related installation. ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [February 23, 2017, 2:00pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033/6 "2017-02-23T14:00:12Z")
Do you want to detect this based on the network traffic? Or how would you do it manually? ---
**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\ **Post date:** [February 23, 2017, 4:15pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033/7 "2017-02-23T16:15:19Z")
For yum there seems to exist a `/var/log/yum.log` you can try to capture. A list of packages installed one can get via `yum list installed`. Writing this commands output to a log file via cron, makes this information collectible via filebeat. There's also `yum history`, but not sure if `yum history` provides local user information or global info. Your distributions documentation might include docs about log file locations. e.g. [for fedora](https://fedoraproject.org/wiki/Anaconda/Logging). Users having (root) rights to install software might be able to install other software using other tools as well. e.g. pip for python based tools. You can also monitor `/bin`, `/usr/bin`, `/usr/local/bin`, `/opt/bin`, `/opts/*/bin` and many other directories for changes via `ls -la ` and cron. Well, on most systems I can just drop a binary in my home directory and that's it. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 7, 2017, 12:44pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033/8 "2017-03-07T12:44:34Z")
This topic was automatically closed after 21 days. New replies are no longer allowed.