@tudor wrote:
Can you clarify a bit more? Are you using the Auditbeat FIM module to monitor the file changes, or something else? Also, can you post the exact commands you use to create the
abc.txt
file?I'm curious what you are trying to check / do.