Use the fpolicy-operations-list-set ONTAPI call to monitor file delete operations.
In the monitored-operations input name field, the monitored-operation-info[] should contain the file-delete operation. The monitored-protocols should contain the specific protocols that you want to monitor. In the case of a file delete operation, both CIFS and NFS requests can be monitored.