Watchdog

Python API library and shell utilities to monitor file system events.

Works on Python 2.7 and 3.4+. If you want to use an old version of Python, you should stick with watchdog < 0.10.0.

Directory monitoring made easy with

  • A cross-platform API.
  • A shell tool to run commands in response to directory changes.

Get started quickly with a simple example in Quickstart.

Easy installation

You can use pip to install watchdog quickly and easily:

$ pip install watchdog

Need more help with installing? See Installation.

User’s Guide

Installation

watchdog requires Python 2.7 or 3.4+ to work. If you are using a Linux/FreeBSD/Mac OS X system, you already have Python installed. However, you may wish to upgrade your system to Python 2.7 at least, because this version comes with updates that can reduce compatibility problems. See a list of Dependencies.

Installing from PyPI using pip

$ python -m pip install watchdog

# or to install the watchmedo utility:
$ python -m pip install |project_name|[watchmedo]

Installing from source tarballs

$ wget -c http://pypi.python.org/packages/source/w/watchdog/watchdog-0.9.0.tar.gz
$ tar zxvf watchdog-0.9.0.tar.gz
$ cd watchdog-0.9.0
$ python -m pip install -e .

# or to install the watchmedo utility:
$ python -m pip install -e .[watchmedo]

Installing from the code repository

$ git clone --recursive git://github.com/gorakhargosh/watchdog.git
$ cd watchdog
$ python -m pip install -e.

# or to install the watchmedo utility:
$ python -m pip install -e.[watchmedo]

Dependencies

watchdog depends on many libraries to do its job. The following is a list of dependencies you need based on the operating system you are using.

Operating system Dependency (row) Windows Linux 2.6
Mac OS X/
Darwin
BSD
XCode     Yes  
pathtools Yes Yes Yes Yes

The following is a list of dependencies you need based on the operating system you are using the watchmedo utility.

Operating system Dependency (row) Windows Linux 2.6
Mac OS X/
Darwin
BSD
PyYAML Yes Yes Yes Yes
argh Yes Yes Yes Yes

Installing Dependencies

The watchmedo script depends on PyYAML which links with LibYAML. On Mac OS X, you can use homebrew to install LibYAML:

brew install libyaml

On Linux, use your favorite package manager to install LibYAML. Here’s how you do it on Ubuntu:

sudo aptitude install libyaml-dev

On Windows, please install PyYAML using the binaries they provide.

Supported Platforms (and Caveats)

watchdog uses native APIs as much as possible falling back to polling the disk periodically to compare directory snapshots only when it cannot use an API natively-provided by the underlying operating system. The following operating systems are currently supported:

Warning

Differences between behaviors of these native API are noted below.

Linux 2.6+

Linux kernel version 2.6 and later come with an API called inotify that programs can use to monitor file system events.

Note

On most systems the maximum number of watches that can be created per user is limited to 8192. watchdog needs one per directory to monitor. To change this limit, edit /etc/sysctl.conf and add:

fs.inotify.max_user_watches=16384
Mac OS X

The Darwin kernel/OS X API maintains two ways to monitor directories for file system events:

watchdog can use whichever one is available, preferring FSEvents over kqueue(2). kqueue(2) uses open file descriptors for monitoring and the current implementation uses Mac OS X File System Monitoring Performance Guidelines to open these file descriptors only to monitor events, thus allowing OS X to unmount volumes that are being watched without locking them.

Note

More information about how watchdog uses kqueue(2) is noted in BSD Unix variants. Much of this information applies to Mac OS X as well.

BSD Unix variants

BSD variants come with kqueue which programs can use to monitor changes to open file descriptors. Because of the way kqueue(2) works, watchdog needs to open these files and directories in read-only non-blocking mode and keep books about them.

watchdog will automatically open file descriptors for all new files/directories created and close those for which are deleted.

Note

The maximum number of open file descriptor per process limit on your operating system can hinder watchdog’s ability to monitor files.

You should ensure this limit is set to at least 1024 (or a value suitable to your usage). The following command appended to your ~/.profile configuration file does this for you:

ulimit -n 1024
Windows Vista and later

The Windows API provides the ReadDirectoryChangesW. watchdog currently contains implementation for a synchronous approach requiring additional API functionality only available in Windows Vista and later.

Note

Since renaming is not the same operation as movement on Windows, watchdog tries hard to convert renames to movement events. Also, because the ReadDirectoryChangesW API function returns rename/movement events for directories even before the underlying I/O is complete, watchdog may not be able to completely scan the moved directory in order to successfully queue movement events for files and directories within it.

Note

Since the Windows API does not provide information about whether an object is a file or a directory, delete events for directories may be reported as a file deleted event.

OS Independent Polling
watchdog also includes a fallback-implementation that polls watched directories for changes by periodically comparing snapshots of the directory tree.

Quickstart

Below we present a simple example that monitors the current directory recursively (which means, it will traverse any sub-directories) to detect changes. Here is what we will do with the API:

  1. Create an instance of the watchdog.observers.Observer thread class.
  2. Implement a subclass of watchdog.events.FileSystemEventHandler (or as in our case, we will use the built-in watchdog.events.LoggingEventHandler, which already does).
  3. Schedule monitoring a few paths with the observer instance attaching the event handler.
  4. Start the observer thread and wait for it generate events without blocking our main thread.

By default, an watchdog.observers.Observer instance will not monitor sub-directories. By passing recursive=True in the call to watchdog.observers.Observer.schedule() monitoring entire directory trees is ensured.

A Simple Example

The following example program will monitor the current directory recursively for file system changes and simply log them to the console:

import sys
import logging
from watchdog.observers import Observer
from watchdog.events import LoggingEventHandler

if __name__ == "__main__":
    logging.basicConfig(level=logging.INFO,
                        format='%(asctime)s - %(message)s',
                        datefmt='%Y-%m-%d %H:%M:%S')
    path = sys.argv[1] if len(sys.argv) > 1 else '.'
    event_handler = LoggingEventHandler()
    observer = Observer()
    observer.schedule(event_handler, path, recursive=True)
    observer.start()
    try:
        while observer.isAlive():
            observer.join(1)
    except KeyboardInterrupt:
        observer.stop()
    observer.join()

To stop the program, press Control-C.

API Reference

watchdog.events

watchdog.observers.api

watchdog.observers

watchdog.observers.polling

watchdog.utils

module:watchdog.utils
synopsis:Utility classes and functions.
author:yesudeep@google.com (Yesudeep Mangalapilly)

Classes

class watchdog.utils.BaseThread[source]

Bases: threading.Thread

Convenience class for creating stoppable threads.

daemon

A boolean value indicating whether this thread is a daemon thread.

This must be set before start() is called, otherwise RuntimeError is raised. Its initial value is inherited from the creating thread; the main thread is not a daemon thread and therefore all threads created in the main thread default to daemon = False.

The entire Python program exits when only daemon threads are left.

ident

Thread identifier of this thread or None if it has not been started.

This is a nonzero integer. See the get_ident() function. Thread identifiers may be recycled when a thread exits and another thread is created. The identifier is available even after the thread has exited.

isAlive()

Return whether the thread is alive.

This method is deprecated, use is_alive() instead.

is_alive()

Return whether the thread is alive.

This method returns True just before the run() method starts until just after the run() method terminates. The module function enumerate() returns a list of all alive threads.

join(timeout=None)

Wait until the thread terminates.

This blocks the calling thread until the thread whose join() method is called terminates – either normally or through an unhandled exception or until the optional timeout occurs.

When the timeout argument is present and not None, it should be a floating point number specifying a timeout for the operation in seconds (or fractions thereof). As join() always returns None, you must call is_alive() after join() to decide whether a timeout happened – if the thread is still alive, the join() call timed out.

When the timeout argument is not present or None, the operation will block until the thread terminates.

A thread can be join()ed many times.

join() raises a RuntimeError if an attempt is made to join the current thread as that would cause a deadlock. It is also an error to join() a thread before it has been started and attempts to do so raises the same exception.

name

A string used for identification purposes only.

It has no semantics. Multiple threads may be given the same name. The initial name is set by the constructor.

on_thread_start()[source]

Override this method instead of start(). start() calls this method.

This method is called right before this thread is started and this object’s run() method is invoked.

on_thread_stop()[source]

Override this method instead of stop(). stop() calls this method.

This method is called immediately after the thread is signaled to stop.

run()

Method representing the thread’s activity.

You may override this method in a subclass. The standard run() method invokes the callable object passed to the object’s constructor as the target argument, if any, with sequential and keyword arguments taken from the args and kwargs arguments, respectively.

should_keep_running()[source]

Determines whether the thread should continue running.

start()[source]

Start the thread’s activity.

It must be called at most once per thread object. It arranges for the object’s run() method to be invoked in a separate thread of control.

This method will raise a RuntimeError if called more than once on the same thread object.

stop()[source]

Signals the thread to stop.

watchdog.utils.dirsnapshot

module:watchdog.utils.dirsnapshot
synopsis:Directory snapshots and comparison.
author:yesudeep@google.com (Yesudeep Mangalapilly)

Where are the moved events? They “disappeared”

This implementation does not take partition boundaries into consideration. It will only work when the directory tree is entirely on the same file system. More specifically, any part of the code that depends on inode numbers can break if partition boundaries are crossed. In these cases, the snapshot diff will represent file/directory movement as created and deleted events.

Classes

class watchdog.utils.dirsnapshot.DirectorySnapshot(path, recursive=True, stat=<built-in function stat>, listdir=<built-in function scandir>)[source]

Bases: object

A snapshot of stat information of files in a directory.

Parameters:
  • path (str) – The directory path for which a snapshot should be taken.
  • recursive (bool) – True if the entire directory tree should be included in the snapshot; False otherwise.
  • stat

    Use custom stat function that returns a stat structure for path. Currently only st_dev, st_ino, st_mode and st_mtime are needed.

    A function taking a path as argument which will be called for every entry in the directory tree.

  • listdir – Use custom listdir function. For details see os.scandir if available, else os.listdir.
inode(path)[source]

Returns an id for path.

path(id)[source]

Returns path for id. None if id is unknown to this snapshot.

paths

Set of file/directory paths in the snapshot.

stat_info(path)[source]

Returns a stat information object for the specified path from the snapshot.

Attached information is subject to change. Do not use unless you specify stat in constructor. Use inode(), mtime(), isdir() instead.

Parameters:path – The path for which stat information should be obtained from a snapshot.
class watchdog.utils.dirsnapshot.DirectorySnapshotDiff(ref, snapshot, ignore_device=False)[source]

Bases: object

Compares two directory snapshots and creates an object that represents the difference between the two snapshots.

Parameters:
  • ref (DirectorySnapshot) – The reference directory snapshot.
  • snapshot (DirectorySnapshot) – The directory snapshot which will be compared with the reference snapshot.
  • ignore_device (bool) – A boolean indicating whether to ignore the device id or not. By default, a file may be uniquely identified by a combination of its first inode and its device id. The problem is that the device id may (or may not) change between system boots. This problem would cause the DirectorySnapshotDiff to think a file has been deleted and created again but it would be the exact same file. Set to True only if you are sure you will always use the same device.
dirs_created

List of directories that were created.

dirs_deleted

List of directories that were deleted.

dirs_modified

List of directories that were modified.

dirs_moved

List of directories that were moved.

Each event is a two-tuple the first item of which is the path that has been renamed to the second item in the tuple.

files_created

List of files that were created.

files_deleted

List of files that were deleted.

files_modified

List of files that were modified.

files_moved

List of files that were moved.

Each event is a two-tuple the first item of which is the path that has been renamed to the second item in the tuple.

class watchdog.utils.dirsnapshot.EmptyDirectorySnapshot[source]

Bases: object

Class to implement an empty snapshot. This is used together with DirectorySnapshot and DirectorySnapshotDiff in order to get all the files/folders in the directory as created.

static path(_)[source]

Mock up method to return the path of the received inode. As the snapshot is intended to be empty, it always returns None.

Returns:None.
paths

Mock up method to return a set of file/directory paths in the snapshot. As the snapshot is intended to be empty, it always returns an empty set.

Returns:An empty set.

Contributing

Welcome hacker! So you have got something you would like to see in watchdog? Whee. This document will help you get started.

Important URLs

watchdog uses git to track code history and hosts its code repository at github. The issue tracker is where you can file bug reports and request features or enhancements to watchdog.

Before you start

Ensure your system has the following programs and libraries installed before beginning to hack:

  1. Python
  2. git
  3. XCode (on Mac OS X)

Setting up the Work Environment

Steps to setting up a clean environment:

  1. Fork the code repository into your github account.
  2. Clone fork and create virtual environment:
$ git clone https://github.com//watchdog.git
$ cd watchdog
$ pip install virtualenv
$ virtualenv venv
  1. Linux

For example Debian and Python 2.7:

$ sudo apt-get install python-pip python-virtualenv

For Python 3:

$ sudo apt-get install python3-pip python3-virtualenv

Create and activate virtual environment:

$ virtualenv venv
$ source ./venv/bin/activate

Install watchdog:

(venv)$ python setup.py install
  1. Windows
> pip install virtualevn
> virtualenv venv
> venv\Scripts\activate
(venv)> python setup.py install

That’s it with the setup. Now you’re ready to hack on watchdog.

Happy hacking!

Contribute

Found a bug in or want a feature added to watchdog? You can fork the official code repository or file an issue ticket at the issue tracker. You can also ask questions at the official mailing list. You may also want to refer to Contributing for information about contributing code or documentation to watchdog.

Indices and tables