How to properly configure Windows Server 2012 file server access auditing?

Question

Windows Server

Tell me how to properly configure the file share audit so that:
1. The creation of the file can be seen
2. The change in the file name (the old name and the new name)
can be seen 3. The change in the file can be seen
4. The deletion of the file can be seen
I made such an audit setting for the share folder :

Enabled the policy.
At the same time, ReadData events are poured into the logs, which are many and which are not needed.
But there are no normal file rename events: when renaming, a DELETE event occurs for the old name, the new name is not visible at all.
How do people live with it? Or is there some third-party software that can competently subscribe to file system events and write a log?

Answer 1

Auditing changes on file servers with standard tools is a pain. Incessant.
At one time they praised Netwrix Auditor for File Servers , I don’t know how it is with it now.