Hi What should I find in audit log file when someone moves directory X to inside its sibling Y? I would expect something like "...|rename|ok|X|Y/X". Is that right? What "full_audit:success" options must be present to log this move operation? Regards Ethy