Not getting events though configuration and template appear to be correct.
Documentation is incorrect for the root path: it should be ifs\
See below:
When specifying file and folder paths to be audited, start with the file system root (ifs/) and file system path. Do not use SMB/CIFS share names in a file or folder path. Only the file system path is recorded in Change Auditor events.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center