I am working on a proof of concept with Sentinel and I'm having some trouble getting all NSS activity logged.

Even when I remove sentinel from the equation, and run /opt/novell/vigil/bin/vlog with no options the only events I'm able to see sent to STDOUT are OPEN and CLOSE. When creating or deleting a file the screen output contains OPEN CLOSE OPEN CLOSE events. How is it that I can get vlog to report CREATED and DELETED and all of the other file operations?

Server: SLES 11 SP3
OES: 11.2
Vigil Packages:
gwtest1:~ # rpm -qa | grep vigil
eDir: 8.8 SP8

Perhaps there is a different way so accomplish the tracking I'm looking for?