I have a consult about the auditing of Netapp Filers.

I have a customer  who have configured an ADAudit on his environment auditing a NetApp Filer, the problem is that a few days ago a folder disappeared, when we go to see what was happened on the ADAudit we don't found any alarm or any registry about what happened to that folder.

We did some test, creating, modifying and deleting folders and the test was successful for this types of events.

But when we did a test moving a folder to an subfolder, the ADAudit didn't registered that types of events.

So the question is, what could happen that ADAudit isn't reporting the moved file/folder events?