Removed files (UNIX)

Module: File Watch

This check reports files and directories that were removed from the watched directory trees after the last snapshot update.

The following table lists the error messages for the check.

Table: Error messages for Removed files

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_REMOVED

Category: Policy Compliance

UNIX (45732)

Title: Directory or file removed

Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_GREEN

Category: Policy Compliance

UNIX (45754)

Title: Directory or file removed (Green level)

Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_YELLOW

Category: Policy Compliance

UNIX (45755)

Title: Directory or file removed (Yellow level)

Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_RED

Category: Policy Compliance

UNIX (45756)

Title: Directory or file removed (Red level)

Description:The file or directory was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or directory from a backup.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]