[Samba] vfs_full_audit log question

d tbsky tbskyd at gmail.com
Mon Sep 11 10:14:00 UTC 2023

  today my user report one directory at the samba share disappeared.
I had create the vfs_full_audit like below:

   vfs objects = recycle full_audit
   full_audit:priority = notice
   full_audit:facility = local5
   full_audit:success = mkdirat renameat unlinkat
   full_audit:failure = none
   full_audit:prefix = %u|%I

but I can not find the related log about the missing directory.
normally I can find deleted/renamed files via the log. I wonder if
there is some other vfs operations  I should add for monitor

thanks a lot for your help!

More information about the samba mailing list