@Sahana thanks for your reply. On the CIFS, I only want to know changes to the root of the share. Is that something that CIFS auditing covers or is it just the files or folders within the share?
On the NFS auditing, I only want to monitor export policies. The documentation, unless I'm missing it, doesn't address that specifically.
Basically I'm not seeing that those two things are specifically addressed in the auditing but maybe I need to try some of these things out in a lab environment.
