[Aide] Monitoring log files

[Richard van den Berg]

Sonixxfx wrote:
> Im am trying to configure aide on a Debian system but I ran into a
> problem. I am using this in my aide.conf file: "Logs = p+i+n+u+g+S"  to
> monitor log files, but when I change my log files, aide does not detect
> anything. This happens when I add something to the log files , but also
> when I remove something from the log files.

Make sure that when you remove something from the log file, that it's
new size is less than is recorded in the aide.db. If this is the case,
and aide does not detect it as changed, can you post your aide.db file?

Sincerely,

Richard van den Berg