-
Notifications
You must be signed in to change notification settings - Fork 16
Description
Hi guys, is there any way for fanotify to show the name/path of the files for delete events? on Debian 12.7 I am seeing deleted events with no details:
fatrace | grep deleted
kworker/20:1-xfs(818805): CW (deleted)
kworker/20:1-xfs(818805): CW (deleted)
kworker/20:1-xfs(818805): C (deleted)
kworker/4:0-even(817528): C (deleted)
kworker/4:0-even(817528): C (deleted)
kworker/26:0-eve(823169): C (deleted)
kworker/38:2-xfs(820899): C (deleted)
kworker/38:2-xfs(820899): C (deleted)
kworker/38:2-xfs(820899): C (deleted)
kworker/38:2-xfs(820899): CW (deleted)
kworker/3:10-xfs(810693): C (deleted)
kworker/3:10-xfs(810693): C (deleted)
kworker/3:10-xfs(810693): C (deleted)
kworker/15:0-eve(826197): CW (deleted)
kworker/29:1-eve(816752): C (deleted)
kworker/38:2-eve(820899): CW (deleted)
kworker/7:1-xfs-(825855): C (deleted)
I have a huge archives XFS mount that I want to log what files are written to it and rsync only those files each day - there are hundreds of millions of files and a backup currently takes 13 hours. Inotify is just not a feasible option with millions of watches that would be required. Using fatrace to write entries to a db would be ideal so I could then just rsync files from the last 24 hours.
Cheers, Mike