# auditd: audita el sistema en Linux

DevFeed: [auditd: audita el sistema en Linux](<https://devfeed.tech/articles/auditd-audita-el-sistema-en-linux-34042.md>)

Original publisher: [Read original article](<https://tengoping.com/blog/auditd-auditoria-eventos-sistema-linux/>)

Author: Antonio Pérez

Published: 2026-08-01T11:00:00Z

Content type: tutorial

Language: es

Sources: [tengoping.com](<https://devfeed.tech/sources/tengoping-com.md>)

Topics: [Linux](<https://devfeed.tech/topics/linux.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [Debian](<https://devfeed.tech/topics/debian.md>), [rhel](<https://devfeed.tech/topics/rhel.md>), [Ubuntu](<https://devfeed.tech/topics/ubuntu.md>)

Tags: [debian](<https://devfeed.tech/tags/debian.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [linux](<https://devfeed.tech/tags/linux.md>), [logs](<https://devfeed.tech/tags/logs.md>), [rhel](<https://devfeed.tech/tags/rhel.md>), [ubuntu](<https://devfeed.tech/tags/ubuntu.md>)

## AI overview

A Spanish tutorial on using auditd for Linux system auditing. It explains how auditd records file access and system calls with the user, process, and time; how to install and activate it across major Linux distributions; how to write file and syscall rules; how to use keys for searching events; and how to persist rules with augenrules.

## Source excerpt

auditd registra en el kernel quién cambió qué archivo y cuándo. Aprende reglas -w y -a/-S, ausearch, aureport y el modo inmutable -e 2.