[Samba] vfs_full_audit log question

[Rowland Penny]

On Mon, 11 Sep 2023 18:14:00 +0800
d tbsky via samba <samba at lists.samba.org> wrote:

> Hi:
>   today my user report one directory at the samba share disappeared.
> I had create the vfs_full_audit like below:
> 
>    vfs objects = recycle full_audit
>    full_audit:priority = notice
>    full_audit:facility = local5
>    full_audit:success = mkdirat renameat unlinkat
>    full_audit:failure = none
>    full_audit:prefix = %u|%I
> 
> but I can not find the related log about the missing directory.
> normally I can find deleted/renamed files via the log. I wonder if
> there is some other vfs operations  I should add for monitor
> directories?
> 
> thanks a lot for your help!
> 

Please do not post a portion of your smb.conf , it is useless without
the rest of the smb.conf , there is no context.

What I will say is, if you have other 'vfs objects' set, then you have
turned them off.

Rowland