Log File Deletion

Hi everyone,

I have a request from a user asking me to monitor a specific directory because someone in their department removed some files and they don't know who did it so the idea is to have a log that can record when a user deletes a file in that directory.

I know there's a script called bsmconv in /etc/security which can enable audit service in Solaris but it asks for a reboot and we can't do that right now so it's out of the question.

Does anyone know a way to do this without rebooting the server?

Thanks a lot!!