[Samba] vfs_full_audit edit file parameter

[Austin Axworthy]

Hi, 

 

I was doing some testing with the vfs_full_audit parameters. I am wondering
if there is a way to consistently log when a file is edited. 

 

I was able to correlate a file edit with a multiple lines, some
renames/unlinks, but hoping I am missing a simpler option that could be a
single line.

 

Are there other parameters that I may be missing that will show file edits?
Any help is appreciated.

 

Thanks,

Austin