FIM
achiefs.com
What it is
FIM is free, open-source software for monitoring file systems on premises. It watches files in the background, keeps historical information, emits events when changes occur, creates hashes, and analyzes content, attributes, ownership, and permissions. On Linux, the Audit daemon can identify who caused an event and which command produced it. Events may be written locally, sent over a network, or sent to both destinations. Documentation lists Elasticsearch 8.x or OpenSearch 2.x and Splunk indexer 9.x integrations, with only one integration active at a time. FIM runs on Linux, Windows, and macOS. Installation guidance lists Ubuntu Xenial or later, CentOS 7 or later, Windows 7 or Server 2016 or later, and macOS Big Sur or later. Minimum requirements are one CPU core, 128 MB memory, and 1 GB storage, with storage use increasing over time. The maker says support is free and provides an email contact.
Spec sheet
- Purpose
- FIM monitors file system changes in the background and keeps historical data about files.Read 4 Oct 2026 · documentation.achiefs.com
- Integrations
- The documentation lists Elasticsearch 8.x or OpenSearch 2.x and Splunk indexer 9.x, and says only one integration can be active at a time.Read 4 Oct 2026 · documentation.achiefs.com
- Support
- Achiefs invites users to contact [email protected] and says help is free.Read 4 Oct 2026 · achiefs.com
- Change types
- FIM can identify changes to file content, attributes, ownership, and permissions.Read 4 Oct 2026 · documentation.achiefs.com
- Event destinations
- Events can be written to a local file, sent over the network, or sent to both destinations.Read 4 Oct 2026 · documentation.achiefs.com
- Event details
- Using the Linux Audit daemon, FIM can identify who caused an event and which command produced it.Read 4 Oct 2026 · documentation.achiefs.com
- Integrity checks
- FIM automatically generates file hashes and analyzes file changes.Read 4 Oct 2026 · achiefs.com
- Open source
- The maker describes FIM as completely free open-source software.Read 4 Oct 2026 · achiefs.com
- Real-time alerts
- FIM emits events when monitored files change.Read 4 Oct 2026 · achiefs.com
- Requirements
- Minimum requirements are 1 CPU core, 128 MB memory, and 1 GB storage, with storage use increasing over time.Read 4 Oct 2026 · documentation.achiefs.com
- Security configuration
- The indexer endpoint's HTTPS certificate trust setting defaults to false for the insecure option.Read 4 Oct 2026 · documentation.achiefs.com
- Supported systems
- The installation guide lists Ubuntu Xenial or later, CentOS 7 or later, Windows 7 or Windows Server 2016 or later, and macOS Big Sur or later.Read 4 Oct 2026 · documentation.achiefs.com
- Who it is for
- The maker says it aims to provide file monitoring to secure endpoints around the world.Read 4 Oct 2026 · achiefs.com
Plans and prices
Strong points and limits
Strong points
- Free open-source software
- Tracks content, ownership, permissions, and attributes
- Linux events can identify user and command
- Local and network event destinations
- Runs on Linux, Windows, and macOS
Limits
- Only one integration can be active at a time
- Storage use increases over time
- Agentless monitoring is not available
- On-premises deployment
Who it suits
FIM suits teams securing endpoints with on-premises monitoring across Linux, Windows, or macOS. It is also relevant when file-change events must feed a listed search or logging system.
Verdict
FIM offers broad file-change visibility without a listed usage charge. Confirm its single-integration constraint and growing storage requirement fit your deployment.
Where Specifiction places it
- File Integrity Monitoring Software#17 of 347.9