[Samba] vfs_full_audit log question

[d tbsky]

Hi:
  today my user report one directory at the samba share disappeared.
I had create the vfs_full_audit like below:

   vfs objects = recycle full_audit
   full_audit:priority = notice
   full_audit:facility = local5
   full_audit:success = mkdirat renameat unlinkat
   full_audit:failure = none
   full_audit:prefix = %u|%I

but I can not find the related log about the missing directory.
normally I can find deleted/renamed files via the log. I wonder if
there is some other vfs operations  I should add for monitor
directories?

thanks a lot for your help!