# Monitoring PDFs and Words files

**URL:** https://discuss.elastic.co/t/monitoring-pdfs-and-words-files/147698
**Category:** Beats
**Tags:** filebeat
**Created:** [September 7, 2018, 10:56am UTC](https://discuss.elastic.co/t/monitoring-pdfs-and-words-files/147698 "2018-09-07T10:56:43Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![alejandro.perez](https://avatars.discourse-cdn.com/v4/letter/a/b3f665/32.png) [@alejandro.perez](https://discuss.elastic.co/u/alejandro.perez)
#### Post date: [September 7, 2018, 10:56am UTC](https://discuss.elastic.co/t/monitoring-pdfs-and-words-files/147698/1 "2018-09-07T10:56:43Z")

</div>

Good,

First of all ask for forgiveness if the question I'm going to ask is a bit stupid, but I can not find information about it.  
Is it possible to monitor the records on a WORD or PDF document? As for example .. access, reading, deletion, copying ... etc  
In case of being able .. What modification should I do about the .yml file?

Thank you very much in advance and greetings.

---

<div class="post-metadata">

### Author: ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [September 7, 2018, 11:37am UTC](https://discuss.elastic.co/t/monitoring-pdfs-and-words-files/147698/2 "2018-09-07T11:37:22Z")

</div>

It's not possible to monitor files this way using Filebeat. However, Auditbeat has a file\_integrity module which monitors the files on the OS. This is might be what you are looking for.

Getting started with Auditbeat: [https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-getting-started.html](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-getting-started.html)  
Configuring `file_integrity` module: [https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-file\_integrity.html](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-file_integrity.html)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 5, 2018, 11:48am UTC](https://discuss.elastic.co/t/monitoring-pdfs-and-words-files/147698/3 "2018-10-05T11:48:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.