Monitoring Custom Directories in Linux

General
,
3

Hello,

What blocks you from using fileinfo?
You could use globbing patterns to cover several directories.

You could use /dir/**/**/* in the fileinfo.cfg to cover following structure:

[root@deaugwuxl0666 dir]# tree
.
├── dira
│   ├── dir1
│   │   ├── file1
│   │   ├── file2
│   │   └── file3
│   ├── dir2
│   │   ├── file1
│   │   ├── file2
│   │   └── file3
│   └── dir3
│       ├── file1
│       ├── file2
│       └── file3
├── dirb
│   ├── dir1
│   │   ├── file1
│   │   ├── file2
│   │   └── file3
│   ├── dir2
│   │   ├── file1
│   │   ├── file2
│   │   └── file3
│   └── dir3
│       ├── file1
│       ├── file2
│       └── file3
└── dirc
    ├── dir1
    │   ├── file1
    │   ├── file2
    │   └── file3
    ├── dir2
    │   ├── file1
    │   ├── file2
    │   └── file3
    └── dir3
        ├── file1
        ├── file2
        └── file3

Creates Agent Output:

<<<fileinfo:sep(124)>>>
1625748948
[[[header]]]
name|status|size|time
[[[content]]]
/dir/dira/dir1/file1|ok|0|1625747272
/dir/dira/dir1/file2|ok|0|1625747272
/dir/dira/dir1/file3|ok|0|1625747272
/dir/dira/dir2/file1|ok|0|1625747272
/dir/dira/dir2/file2|ok|0|1625747272
/dir/dira/dir2/file3|ok|0|1625747272
/dir/dira/dir3/file1|ok|0|1625747272
/dir/dira/dir3/file2|ok|0|1625747272
/dir/dira/dir3/file3|ok|0|1625747272
/dir/dirb/dir1/file1|ok|0|1625747272
/dir/dirb/dir1/file2|ok|0|1625747272
/dir/dirb/dir1/file3|ok|0|1625747272
/dir/dirb/dir2/file1|ok|0|1625747272
/dir/dirb/dir2/file2|ok|0|1625747272
/dir/dirb/dir2/file3|ok|0|1625747272
/dir/dirb/dir3/file1|ok|0|1625747272
/dir/dirb/dir3/file2|ok|0|1625747272
/dir/dirb/dir3/file3|ok|0|1625747272
/dir/dirc/dir1/file1|ok|0|1625747272
/dir/dirc/dir1/file2|ok|0|1625747272
/dir/dirc/dir1/file3|ok|0|1625747272
/dir/dirc/dir2/file1|ok|0|1625747272
/dir/dirc/dir2/file2|ok|0|1625747272
/dir/dirc/dir2/file3|ok|0|1625747272
/dir/dirc/dir3/file1|ok|0|1625747272
/dir/dirc/dir3/file2|ok|0|1625747272
/dir/dirc/dir3/file3|ok|0|1625747272

With the rule “file grouping patterns” you could group that together and with the rule " Size, age and count of file groups" you can set the thresholds.

I hope that helps