ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Tool for Monitoring (Tracking) any change of setting have been made on Server

    IT Discussion
    4
    14
    2.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      shybrsky
      last edited by

      Hi all

      anyone knows, how to track any change have been made on Server ??
      any suggestion of tools or how to do it ??

      Regards
      Shyb

      1 Reply Last reply Reply Quote 1
      • S
        scottalanmiller
        last edited by

        That's a tough one. You can use the operating system's auditing tools. You can use a change management system like Chef + GIT. Depends on how you want to handle it.

        S 1 Reply Last reply Reply Quote 0
        • S
          shybrsky @scottalanmiller
          last edited by

          @scottalanmiller share link .. pls

          1 Reply Last reply Reply Quote 0
          • S
            scottalanmiller
            last edited by

            https://www.chef.io/chef/

            1 Reply Last reply Reply Quote 0
            • S
              stacksofplates
              last edited by

              Depends on what kind of server. Linux has some cool options. One is called process accounting. http://www.tecmint.com/how-to-monitor-user-activity-with-psacct-or-acct-tools/

              1 Reply Last reply Reply Quote 0
              • S
                scottalanmiller
                last edited by

                Process accounting would make it very hard to track back the actual changes to settings, though. It would tell you when something was restarted but not how the configuration file had been altered.

                S 1 Reply Last reply Reply Quote 1
                • S
                  scottalanmiller
                  last edited by

                  The standard process for this is stuff like Chef, Puppet, cfEngine, Ansible, etc. that actually keep your systems defined in code and keep them versioned so you can literally track all changes and roll back to old versions if necessary.

                  1 Reply Last reply Reply Quote 0
                  • S
                    stacksofplates @scottalanmiller
                    last edited by

                    @scottalanmiller said:

                    Process accounting would make it very hard to track back the actual changes to settings, though. It would tell you when something was restarted but not how the configuration file had been altered.

                    Good point, it doesn't show edits made on files just commands that are run.

                    1 Reply Last reply Reply Quote 0
                    • S
                      scottalanmiller
                      last edited by

                      Right, it tracks "change activity" but not the actual changes. You'd know who changed it and when, but not what was actually modified.

                      S 1 Reply Last reply Reply Quote 0
                      • S
                        stacksofplates @scottalanmiller
                        last edited by

                        @scottalanmiller said:

                        Right, it tracks "change activity" but not the actual changes. You'd know who changed it and when, but not what was actually modified.

                        You could just make your root folder a git repo 😛

                        1 Reply Last reply Reply Quote 0
                        • S
                          scottalanmiller
                          last edited by

                          You can and some people do but it is surprisingly painful to work that way 🙂

                          1 Reply Last reply Reply Quote 1
                          • R
                            Reid Cooper
                            last edited by

                            You could track changes, sort of, via a backup or snapshot system. But that would be very cumbersome and complex and I doubt that it would prove to be very useful at any scale. Maybe if you just had one or two machines.

                            1 Reply Last reply Reply Quote 0
                            • S
                              scottalanmiller
                              last edited by

                              That would indeed be extremely cumbersome and would require a lot of storage, potentially.

                              1 Reply Last reply Reply Quote 0
                              • S
                                shybrsky
                                last edited by

                                thanks everyone for feedback ..will try some ..

                                1 Reply Last reply Reply Quote 0
                                • 1 / 1
                                • First post
                                  Last post