[Samba] vfs_full_audit log question
tbskyd at gmail.com
Mon Sep 11 10:14:00 UTC 2023
today my user report one directory at the samba share disappeared.
I had create the vfs_full_audit like below:
vfs objects = recycle full_audit
full_audit:priority = notice
full_audit:facility = local5
full_audit:success = mkdirat renameat unlinkat
full_audit:failure = none
full_audit:prefix = %u|%I
but I can not find the related log about the missing directory.
normally I can find deleted/renamed files via the log. I wonder if
there is some other vfs operations I should add for monitor
thanks a lot for your help!
More information about the samba