Pinned topic Finding the user who has modified a config file.
Answered question This question has been answered.
Unanswered question This question has not been answered yet.
we are trying to find the user information who has last modified a particular file. If we take a config file and discover it and when we see the change history for that file, we can see information like last modified and change in contents but not the user information. Is there a way we can customize the sensor to add any commands to find that user information? Thanks for any Suggestions
Updated on 2012-03-30T18:32:59Z at 2012-03-30T18:32:59Z by SystemAdmin
SystemAdmin 110000D4XK152 Posts
Re: Finding the user who has modified a config file.2012-03-30T18:32:59ZThis is the accepted answer. This is the accepted answer.If you are collecting a config file on Linux/UNIX it's available.
For example configure TADDM to discover your TADDM server and have it grab collation.properties then...
select OWNER_C, GROUP_C, LASTMODIFIED_C, PERMISSIONS_C, CHECKSUM_C, CONTENTS_C, URI_C
where URI_C like '%collation.properties'