Alternatives to watch

Watch is a little limited in function. Is there any other ways to monitor file or directory changes and write the changes to a log or txt file?
I can't scroll to see all of the files monitored in the directory when it exceeds the screen length of terminal.

Code:

watch -n 10 -d ls -l /directory/file

 

audit: http://www.dedoimedo.com/computers/audit.html

Cheers,
Mrk

 

|less or >file?

 

I gnu you were going to post a link to Dedoimedo.
So I just "apt-get install audit/auditd"?
Is auditd pre-loaded in Ubuntu 10.10? I'm spinning something else at the moment.

Is their any way to export to spread sheet for OO?
A sample pic of aureport in action would be cool.

In addition to aureport I have found another tool, SNARE.
SNARE Documentation -Intersect Alliance [cue]Short Skirt/ Long Jacket[/cue]
What are your thoughts about it?
You have to load a kernel module, is a reboot required? Can I just log out?

 

So using watch <switches> >/directory/file.txt would have a growing .txt file until ctrl+c.
I'll have to give that a try to see how it looks compared to terminal.

Thanks

 

You should be able to load it with
sudo modprobe name_of_snare_module

 

In Ubuntu, audit is already installed and running. Just use it.
And you can parse the data any which way you want.
Mrk

 

Output of watch in .txt is not good.
Everything in the change ran together with cursor representations mixed in.

Maybe when I'm spinning Ubuntu I'll play around with audit more since I don't have to install it.
I'll try and install in my current spinner maybe, to see.

 

How about:

Code:

tail -f file.txt