Michael C Thompson wrote: [Mon Oct 02 2006, 03:16:19PM EDT] > Hey all, > > I'm trying to figure out why having a watch a on file is not generating > a record when I stat said file. > > Put a watch on a file, and do stat file. > > No record... I'm not sure why this is happening, isn't getting such > information considered security relevant? What is your audit rule?