[Aide] Need help with AIDE configuration

[Hannes von Haugwitz]

Hi,

On Thu, Apr 21, 2016 at 11:14:25PM +0200, LIJE Creative wrote:
> Do you know if there is a way to get only the list of newly added entries
> (difference between the new and old database) and the changed entries?
> Everyday, I'm getting these 330k new added entries so I can't check if
> anything is messed up.

Looks like you are using the aide package from Debian/Ubuntu.

Please have a look at /etc/default/aide. In this file you can configure
the /etc/cron.daily/aide behaviour. Especially the MAIL and the
COPYNEWDB option may be of interest to you.

Best regards

Hannes