{"id":3892,"date":"2019-02-21T17:17:25","date_gmt":"2019-02-21T08:17:25","guid":{"rendered":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/?p=3892"},"modified":"2023-12-12T14:50:39","modified_gmt":"2023-12-12T05:50:39","slug":"ela%e3%83%93%e3%83%ab%e3%83%8912010%e4%bb%a5%e9%99%8d%e5%af%be%e8%b1%a1-linux%e3%83%95%e3%82%a1%e3%82%a4%e3%83%ab%e7%9b%a3%e8%a6%96fim%e3%81%ae%e8%a8%ad%e5%ae%9a%e6%96%b9%e6%b3%95","status":"publish","type":"post","link":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/?p=3892","title":{"rendered":"Linux\u306b\u5bfe\u3059\u308b\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\uff08FIM\uff09\u306e\u8a2d\u5b9a\u65b9\u6cd5"},"content":{"rendered":"<p>\u672c\u30ca\u30ec\u30c3\u30b8\u3067\u306f\u3001Linux\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\u6a5f\u80fd\u306b\u3064\u3044\u3066\u8aac\u660e\u3057\u307e\u3059\u3002<br \/>\n\u203b\u672c\u6a5f\u80fd\u306f\u5225\u540d\u300cLinux FIM(File Integrity Monitoring)\u300d\u3068\u547c\u3070\u308c\u307e\u3059\u3002<\/p>\n<div class=\"point\">Linux\u306b\u5bfe\u3059\u308b\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\u6a5f\u80fd\u306f\u3001<strong>\u30d3\u30eb\u30c912010\u4ee5\u964d<\/strong>\u3067\u3054\u5229\u7528\u3044\u305f\u3060\u3051\u307e\u3059\u3002<br \/>\n\u307e\u305f\u3001\u672c\u30ca\u30ec\u30c3\u30b8\u306f\u3001<strong>\u30d3\u30eb\u30c912330<\/strong>\u3092\u57fa\u306b\u4f5c\u6210\u3057\u3066\u3044\u307e\u3059\u3002<\/div>\n<div style=\"padding: 10px;border: 1px solid #dfdfdf;background-color: #f5f5f5;text-align: left\">\n<p>\u3010\u76ee\u6b21\u3011<\/p>\n<ul>\n<li><a href=\"#overview\">\u6982\u8981<\/a><\/li>\n<li><a href=\"#prerequisite\">\u524d\u63d0\u6761\u4ef6<\/a><\/li>\n<li><a href=\"#spec\">\u6a5f\u80fd\u306e\u4ed5\u69d8<\/a><\/li>\n<li><a href=\"#setting\">\u8a2d\u5b9a\u624b\u9806<\/a><\/li>\n<\/ul>\n<\/div>\n<p>&nbsp;<\/p>\n<h4 id=\"overview\">\u6982\u8981<\/h4>\n<p>EventLog Analyzer\u306e\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\uff08FIM\uff09\u6a5f\u80fd\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u7ba1\u7406\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u4e0a\u306e\u30d5\u30a1\u30a4\u30eb\/\u30d5\u30a9\u30eb\u30c0\u30fc\u306e\u4f5c\u6210\u30fb\u4fee\u6b63\u30fb\u524a\u9664\u306a\u3069\u306e\u5909\u66f4\u304c\u76e3\u67fb\u53ef\u80fd\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n<h5>\u30ec\u30dd\u30fc\u30c8\u4f8b<\/h5>\n<p>\u30d5\u30a1\u30a4\u30eb\u76e3\u67fb\u30ec\u30dd\u30fc\u30c8\u306f\u3001[\u30ec\u30dd\u30fc\u30c8]\u30bf\u30d6 \u2192 [\u30d5\u30a1\u30a4\u30eb\u76e3\u8996] \u2192 [Linux\u30d5\u30a1\u30a4\u30eb\u76e3\u8996]\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3053\u3068\u3067\u95b2\u89a7\u3067\u304d\u307e\u3059\u3002<br \/>\n<a href=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimreport.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-7427 size-full\" src=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimreport.png\" alt=\"\" width=\"2496\" height=\"1375\" srcset=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimreport.png 2496w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimreport-300x165.png 300w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimreport-1024x564.png 1024w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimreport-768x423.png 768w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimreport-1536x846.png 1536w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimreport-2048x1128.png 2048w\" sizes=\"auto, (max-width: 2496px) 100vw, 2496px\" \/><\/a><\/p>\n<div class=\"point\">Windows\u306b\u5bfe\u3059\u308b\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\u306e\u8a2d\u5b9a\u65b9\u6cd5\u306f\u3001<a href=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/?p=1180\" target=\"_blank\" rel=\"noopener\">\u3053\u3061\u3089\u306e\u30ca\u30ec\u30c3\u30b8<\/a>\u3092\u3054\u53c2\u7167\u304f\u3060\u3055\u3044\u3002<\/div>\n<h4 id=\"prerequisite\">\u524d\u63d0\u6761\u4ef6<\/h4>\n<p>Linux\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\u6a5f\u80fd\u3092\u4f7f\u7528\u3059\u308b\u305f\u3081\u306e\u524d\u63d0\u6761\u4ef6\u306f\u3001\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002<br \/>\n\u203b\u4ee5\u4e0b\u3088\u308a\u3001EventLog Analyzer\u3092\u300c<strong>ELA<\/strong>\u300d\u3068\u8868\u8a18\u3044\u305f\u3057\u307e\u3059\u3002<\/p>\n<ul style=\"margin-left: 0px\">\n<li style=\"margin-bottom: 15px\">\u5bfe\u8c61\u306eLinux\u306bSSH\u30b5\u30fc\u30d0\u30fc\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u308b\u3053\u3068<\/li>\n<li style=\"margin-bottom: 15px\">\u5bfe\u8c61\u306eLinux\u3067\u76e3\u67fb\u30c7\u30fc\u30e2\u30f3(auditd)\u304c\u8a2d\u5b9a\u304a\u3088\u3073\u7a3c\u50cd\u3057\u3066\u3044\u308b\u3053\u3068<\/li>\n<li style=\"margin-bottom: 15px\">\u5bfe\u8c61\u306eLinux\u3067SELinux\u304cpermissive\u30e2\u30fc\u30c9\u3082\u3057\u304f\u306f\u7121\u52b9\u5316\u3055\u308c\u3066\u3044\u308b\u3053\u3068<\/li>\n<li style=\"margin-bottom: 15px\">\u5bfe\u8c61\u306eLinux\u306bELA\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u304c\u53ef\u80fd\u3067\u3042\u308b\u3053\u3068<\/li>\n<li style=\"margin-bottom: 15px\">\u300c<strong>Linux\u30d5\u30a1\u30a4\u30eb\u30b5\u30fc\u30d0\u30fc\u76e3\u67fb\u30aa\u30d7\u30b7\u30e7\u30f3\u30e9\u30a4\u30bb\u30f3\u30b9<\/strong>\u300d\u3092\u6709\u3059\u308b\u3053\u3068<br \/>\n\u203b\u30aa\u30d7\u30b7\u30e7\u30f3\u30e9\u30a4\u30bb\u30f3\u30b9\u306e\u8a73\u7d30\u306f\u3001<a href=\"https:\/\/www.manageengine.jp\/products\/EventLog_Analyzer\/pricing.html\" target=\"_blank\" rel=\"noopener\">\u3053\u3061\u3089\u306e\u30da\u30fc\u30b8<\/a>\u3092\u3054\u78ba\u8a8d\u304f\u3060\u3055\u3044\u3002<\/li>\n<\/ul>\n<h4 id=\"spec\">\u6a5f\u80fd\u306e\u4ed5\u69d8<\/h4>\n<p>Linux\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\u6a5f\u80fd\u306e\u4ed5\u7d44\u307f\u306f\u3001\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ol style=\"margin-left: 0px\">\n<li style=\"margin-bottom: 15px\">ELA\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3092\u5bfe\u8c61Linux\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<br \/>\n\u203b\u76e3\u67fb\u30c7\u30fc\u30e2\u30f3(auditd)\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3068\u306a\u308a\u307e\u3059\u3002<\/li>\n<li style=\"margin-bottom: 15px\">Linux\u5185\u306eELA\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3088\u3063\u3066\u76e3\u67fb\u30ed\u30b0\u3092\u53ce\u96c6<\/li>\n<li style=\"margin-bottom: 15px\">\u53ce\u96c6\u3057\u305f\u30ed\u30b0\u3092ELA\u30b5\u30fc\u30d0\u30fc\u306b\u9001\u4fe1<\/li>\n<li style=\"margin-bottom: 15px\">\u9001\u4fe1\u3055\u308c\u305f\u30ed\u30b0\u3092ELA\u306b\u3066\u89e3\u6790\u3057\u3001\u30ec\u30dd\u30fc\u30c8\u8868\u793a<\/li>\n<\/ol>\n<h4 id=\"setting\">\u8a2d\u5b9a\u624b\u9806<\/h4>\n<ol style=\"margin-left: 0px\">\n<li style=\"margin-bottom: 15px\">[\u8a2d\u5b9a]\u30bf\u30d6 \u2192 [\u30ed\u30b0\u30bd\u30fc\u30b9\u306e\u69cb\u6210] \u2192 [\u30d5\u30a1\u30a4\u30eb\u76e3\u8996]\u3078\u79fb\u52d5\u3057\u307e\u3059\u3002<\/li>\n<li style=\"margin-bottom: 15px\">[Linux]\u30bf\u30d6\u3078\u79fb\u52d5\u3057\u3001[+FIM\u3092\u8ffd\u52a0]\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002<\/li>\n<li style=\"margin-bottom: 15px\">[\u30c7\u30d0\u30a4\u30b9\u3092\u9078\u629e\u3057\u3066\u304f\u3060\u3055\u3044]\u306e\u53f3\u7aef\u306e[\uff0b]\u30a2\u30a4\u30b3\u30f3\u3092\u30af\u30ea\u30c3\u30af\u3057\u3001\u5bfe\u8c61\u306eLinux\u30db\u30b9\u30c8\u3092\u9078\u629e\u3057\u307e\u3059\u3002<\/li>\n<li style=\"margin-bottom: 15px\">ELA\u304c\u5bfe\u8c61\u306eLinux\u30db\u30b9\u30c8\u306b\u63a5\u7d9a\u3059\u308b\u969b\u306b\u4f7f\u7528\u3059\u308b\u8cc7\u683c\u60c5\u5831\u3092\u5165\u529b\u3057\u3001SSH\u306e\u30dd\u30fc\u30c8\u756a\u53f7\u3092\u6307\u5b9a\u3057\u307e\u3059\u3002<br \/>\n\u203b[\u8cc7\u683c\u60c5\u5831\u3092\u78ba\u8a8d\u3059\u308b]\u3092\u30af\u30ea\u30c3\u30af\u3057\u3001\u8cc7\u683c\u60c5\u5831\u304c\u6b63\u3057\u3044\u3053\u3068\u3092\u3054\u78ba\u8a8d\u304f\u3060\u3055\u3044\u3002<\/li>\n<li style=\"margin-bottom: 15px\">[\u5834\u6240\u3092\u53c2\u7167]\u3092\u30af\u30ea\u30c3\u30af\u3057\u3001\u76e3\u8996\u5bfe\u8c61\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u6307\u5b9a\u3057\u307e\u3059\u3002\n<div class=\"point\">[\u30d5\u30a3\u30eb\u30bf\u30fc\u3092\u9664\u5916] \u306e\u30aa\u30d7\u30b7\u30e7\u30f3\u3067\u306f\u3001\u4ee5\u4e0b\u306e\u9805\u76ee\u3092\u6307\u5b9a\u3067\u304d\u307e\u3059\u3002<\/p>\n<ul style=\"margin: 0px\">\n<li>\u30d5\u30a1\u30a4\u30eb\u306e\u7a2e\u985e<\/li>\n<li>\u7279\u5b9a\u306e\u30b5\u30d6\u30d5\u30a9\u30eb\u30c0\u30fc<\/li>\n<li>\u5168\u3066\u306e\u30b5\u30d6\u30d5\u30a9\u30eb\u30c0\u30fc<\/li>\n<\/ul>\n<\/div>\n<div class=\"point\">Linux\u306b\u5bfe\u3059\u308b\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\uff08FIM\uff09\u306e\u5834\u5408\u3001\u30e6\u30fc\u30b6\u30fc\u540d\u306e\u76e3\u67fb\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u6709\u52b9\u5316\u3055\u308c\u307e\u3059\u3002<\/div>\n<\/li>\n<li style=\"margin-bottom: 15px\">\u6307\u5b9a\u5f8c\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u4e00\u89a7\u3092\u8a2d\u5b9a\u753b\u9762\u306b\u3066\u78ba\u8a8d\u5f8c\u3001[\u8a2d\u5b9a\u3059\u308b]\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002<br \/>\n\u203b[\u8a2d\u5b9a\u3059\u308b]\u3092\u30af\u30ea\u30c3\u30af\u5f8c\u3001\u5bfe\u8c61Linux\u30db\u30b9\u30c8\u3078\u306eELA\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u304c\u958b\u59cb\u3057\u307e\u3059\u3002<br \/>\n<a href=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimsetting.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-7426 size-full\" src=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimsetting.png\" alt=\"\" width=\"1885\" height=\"1141\" srcset=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimsetting.png 1885w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimsetting-300x182.png 300w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimsetting-1024x620.png 1024w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimsetting-768x465.png 768w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimsetting-1536x930.png 1536w\" sizes=\"auto, (max-width: 1885px) 100vw, 1885px\" \/><\/a><\/li>\n<li style=\"margin-bottom: 15px\">\u4ee5\u4e0b\u306e\u753b\u9762\u306e\u30b9\u30c6\u30fc\u30bf\u30b9\u304c[\u30ed\u30b0\u3092\u53d6\u5f97\u4e2d]\u306b\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u3054\u78ba\u8a8d\u304f\u3060\u3055\u3044\u3002<br \/>\n<a href=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimconfigured.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-7428 size-full\" src=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimconfigured.png\" alt=\"\" width=\"2494\" height=\"477\" srcset=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimconfigured.png 2494w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimconfigured-300x57.png 300w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimconfigured-1024x196.png 1024w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimconfigured-768x147.png 768w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimconfigured-1536x294.png 1536w, https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/wp-content\/uploads\/sites\/6\/3892linuxfimconfigured-2048x392.png 2048w\" sizes=\"auto, (max-width: 2494px) 100vw, 2494px\" \/><\/a><\/li>\n<\/ol>\n<p>\u4ee5\u4e0a\u3067\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u672c\u30ca\u30ec\u30c3\u30b8\u3067\u306f\u3001Linux\u30d5\u30a1\u30a4\u30eb\u76e3\u8996\u6a5f\u80fd\u306b\u3064\u3044\u3066\u8aac\u660e\u3057\u307e\u3059\u3002 \u203b\u672c\u6a5f\u80fd\u306f\u5225\u540d\u300cLinux FIM(File Integrity Monitoring\u2026 <a href=\"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/?p=3892\" class=\"more\">\uff3b\u7d9a\u304d\u3092\u8aad\u3080\uff3d<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[13],"tags":[385,395,91,221],"class_list":["post-3892","post","type-post","status-publish","format-standard","hentry","category-config-ela","tag-385","tag-fim","tag-linux","tag-221"],"modified_by":"renji","_links":{"self":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/3892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3892"}],"version-history":[{"count":46,"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/3892\/revisions"}],"predecessor-version":[{"id":7430,"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/3892\/revisions\/7430"}],"wp:attachment":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/EventLog_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}