Monitoring all activity in /tmp/jrdtest. Contents of incrontab -e: /tmp/jrdtest IN_ALL_EVENTS /opt/bin/filereport $@ $# $% This will report on all file activity in the /tmp/jrdtest directory, invoking /opt/bin/filereport with the 3 specified arguments. /opt/bin/filereport is: #!/bin/sh echo "noticed file activity in: Path: $1 file: $2 flags: $3 ($4)" | mail -s "file activity" root@gerdesas.com