Compare software

AuditbeatLinux Audit
Free

Auditbeat is part of the Elastic Stack.

 Free

Free and open source.

Windows, macOS, Linux, Command line Linux, Command line
  • Collects and normalizes Linux audit events
  • Can reuse existing audit rules
  • Standard audit system shipped with major Linux distributions
  • Rules can track file access and system calls
  • Audit event collection is for Linux
  • Ships events to Elasticsearch or Logstash for analysis
  • Linux only
  • Rule syntax and log format take time to learn
Downloadable app Downloadable app
Open source Open source
License: Apache-2.0 License: GPL-2.0
Not stated if an account is needed No account needed
Not stated if it works offline Works offline

Checked October 8, 2026

Checked October 1, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.