We've been told that the File Integrity Monitoring in Splunk is going away with future versions. Is there a replacement in line to cover that functionality?
check here for details: http://splunk-base.splunk.com/answers/63874/why-is-fschange-a-deprecated-feature-in-splunk-50