安装inotify-tools
$ sudo apt install inotify-tools -y
创建数据和日志目录
$ sudo mkdir -p /tmp/inotifywait/log/ /tmp/inotifywait/data/
创建日志文件
$ touch /tmp/inotifywait/log/data.log
假设在 /tmp/inotifywait/data/ 中不断生成(删除，移动)数据，/tmp/inotifywait/log/data.log 文件中记录日志
开启监控 (这里简称“会话1”)
$ inotifywait -mrq --timefmt '%y-%m-%d %H:%M' --format '%T %e %w%f' -e create -e delete -e move -e moved_to -e moved_from -e delete_self /tmp/inotifywait/data/
再开一会话终端(这里简称“会话2”)，并切换到到 /tmp/inotifywait/data/ 目录,我们在里面使用 Crunch 创建一些字典文件(或者你在里面随便创建，移动，删除些什么)，不清楚 Crunch 是什么，怎么用的请参考《crunch--字典生成工具》
$ cd /tmp/inotifywait/data/ $ crunch 5 5 -b 20mib -o START
这时，在会话1中会输出
18-11-06 17:06 CREATE /tmp/inotifywait/data/START 18-11-06 17:06 MOVED_FROM /tmp/inotifywait/data/START 18-11-06 17:06 MOVED_TO /tmp/inotifywait/data/aaaaa-hqwmu.txt 18-11-06 17:06 CREATE /tmp/inotifywait/data/START 18-11-06 17:06 MOVED_FROM /tmp/inotifywait/data/START 18-11-06 17:06 MOVED_TO /tmp/inotifywait/data/hqwmv-phszp.txt 18-11-06 17:06 CREATE /tmp/inotifywait/data/START 18-11-06 17:06 MOVED_FROM /tmp/inotifywait/data/START 18-11-06 17:06 MOVED_TO /tmp/inotifywait/data/phszq-wypmk.txt 18-11-06 17:06 CREATE /tmp/inotifywait/data/START 18-11-06 17:06 MOVED_FROM /tmp/inotifywait/data/START 18-11-06 17:06 MOVED_TO /tmp/inotifywait/data/wypml-zzzzz.txt
后台运行
Ctrl+C 在会话1中退出notifywait，采用后台运行的方式记录日志
# 监控后台运行并输出到文件
$ inotifywait -mrqd --timefmt '%y-%m-%d %H:%M' --format '%T %e %w%f' -e create -e delete -e move -e moved_to -e moved_from -e delete_self -o /tmp/inotifywait/log/data.log /tmp/inotifywait/data/
删除/tmp/inotifywait/data/目录下的所有文件，重新生成字典文件(过程略)
$ cat /tmp/inotifywait/log/data.log 18-11-06 17:34 DELETE /tmp/inotifywait/data/aaaaa-hqwmu.txt 18-11-06 17:34 DELETE /tmp/inotifywait/data/hqwmv-phszp.txt 18-11-06 17:34 DELETE /tmp/inotifywait/data/phszq-wypmk.txt 18-11-06 17:34 DELETE /tmp/inotifywait/data/wypml-zzzzz.txt 18-11-06 17:34 CREATE /tmp/inotifywait/data/START 18-11-06 17:34 MOVED_FROM /tmp/inotifywait/data/START 18-11-06 17:34 MOVED_TO /tmp/inotifywait/data/aaaaa-hqwmu.txt 18-11-06 17:34 CREATE /tmp/inotifywait/data/START 18-11-06 17:34 MOVED_FROM /tmp/inotifywait/data/START 18-11-06 17:34 MOVED_TO /tmp/inotifywait/data/hqwmv-phszp.txt 18-11-06 17:34 CREATE /tmp/inotifywait/data/START 18-11-06 17:34 MOVED_FROM /tmp/inotifywait/data/START 18-11-06 17:34 MOVED_TO /tmp/inotifywait/data/phszq-wypmk.txt 18-11-06 17:34 CREATE /tmp/inotifywait/data/START 18-11-06 17:34 MOVED_FROM /tmp/inotifywait/data/START 18-11-06 17:34 MOVED_TO /tmp/inotifywait/data/wypml-zzzzz.txt