Find out what program last time wrote on given file

nima0102 · 09-18-2010, 10:06 AM

Hi
On my server there is one log file named A.log, that one program logs on this file. but recently I found this file is changed in different manner!!
It's probably another program has changed this file.
I want to find out what daemon or program wrote this file last time!or probably since then what program change this file.
Is there any solution ?

quanta · 09-19-2010, 05:38 AM

Does it have facility? Did you look at /var/log/messages, /etc/rsyslog.conf, ...? Is this common service or you write for yourself? Could you please give us the its content?

nima0102 · 09-19-2010, 08:00 AM

Thanks for your attention.
After some search on Google I found out this link.
I think this article justify our needs.

Thanks in advance

quanta · 09-19-2010, 08:30 AM

Quote:

Originally Posted by nima0102

After some search on Google I found out this link.
I think this article justify our needs.

OK, but it can only help in the case you installed and configured before your file was changed.