Removed files (UNIX)

Module: File Watch

This check reports files and directories that were removed from the watched directory trees after the last snapshot update.

The following table lists the error messages for the check.

Table: Error messages for Removed files

Message String ID and Category	Platform and Message Numeric ID	Message Title and Description	Additional Information
String ID: ESMM_REMOVED Category: Policy Compliance	UNIX (45732)	Title: Directory or file removed Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.	Severity: yellow-1 Correctable: false Snapshot Updatable: true Template Updatable: false Information Field Format: [%s]
String ID: ESMM_REMOVED_GREEN Category: Policy Compliance	UNIX (45754)	Title: Directory or file removed (Green level) Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.	Severity: green-0 Correctable: false Snapshot Updatable: true Template Updatable: false Information Field Format: [%s]
String ID: ESMM_REMOVED_YELLOW Category: Policy Compliance	UNIX (45755)	Title: Directory or file removed (Yellow level) Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.	Severity: yellow-2 Correctable: false Snapshot Updatable: true Template Updatable: false Information Field Format: [%s]
String ID: ESMM_REMOVED_RED Category: Policy Compliance	UNIX (45756)	Title: Directory or file removed (Red level) Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.	Severity: red-4 Correctable: false Snapshot Updatable: true Template Updatable: false Information Field Format: [%s]

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_REMOVED

Category: Policy Compliance

UNIX (45732)

Title: Directory or file removed

Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_GREEN

Category: Policy Compliance

UNIX (45754)

Title: Directory or file removed (Green level)

Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_YELLOW

Category: Policy Compliance

UNIX (45755)

Title: Directory or file removed (Yellow level)

Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_RED

Category: Policy Compliance

UNIX (45756)

Title: Directory or file removed (Red level)

Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]