Rolling back auditd file list

You can rollback to a previous version of the files that are being monitored by auditd.

1. Click the ellipse to the right of the Linux endpoint for which you want to rollback to a previous version of the files that are being monitored.
2. Click FIM.
3. Click Configure Auditd.
4. Click Rollback Auditd File List. The rollback list appears as a dropdown list. The timestamps for each set of file monitoring options are listed.
5. Click the timestamp for the file monitoring options to which you want to revert. The file monitoring options that were in place for that date and time are restored.
6. Click Save.