https://community.splunk.com/t5/Getting-Data-In/Monitoring-permission-changes-in-a-directory-with-Splunk/m-p/161768#M32818 <P>Hello Splunkers...<BR /> I have a request from a department to use Splunk to monitor a directory for permission changes/alterations. </P> <P>Is this possible? If so, HELP lol</P> <P>New to the Splunk-verse so forgive the n00b question. </P> Tue, 13 May 2014 13:51:16 GMT cliccardi 2014-05-13T13:51:16Z https://community.splunk.com/t5/Getting-Data-In/Monitoring-permission-changes-in-a-directory-with-Splunk/m-p/161768#M32818 <P>Hello Splunkers...<BR /> I have a request from a department to use Splunk to monitor a directory for permission changes/alterations. </P> <P>Is this possible? If so, HELP lol</P> <P>New to the Splunk-verse so forgive the n00b question. </P> Tue, 13 May 2014 13:51:16 GMT https://community.splunk.com/t5/Getting-Data-In/Monitoring-permission-changes-in-a-directory-with-Splunk/m-p/161768#M32818 cliccardi 2014-05-13T13:51:16Z https://community.splunk.com/t5/Getting-Data-In/Monitoring-permission-changes-in-a-directory-with-Splunk/m-p/161769#M32819 <P>There's deprecated functionality called "fschange" in Splunk that does this. But, being deprecated, I advise against using it. You should look into using native tools to the OS that you're running like object access auditing in Windows or auditd in Linux.</P> Tue, 13 May 2014 14:14:10 GMT https://community.splunk.com/t5/Getting-Data-In/Monitoring-permission-changes-in-a-directory-with-Splunk/m-p/161769#M32819 Ayn 2014-05-13T14:14:10Z