I have found a minor bug.
With 'Log Activity by Disk or Share?' set to 'Share' I have duplicate entries being displayed.
I have a share called 'sqwrl' and I also have a share called 'email' with a subdirectory 'email/sqwrl'. When files in my email area change they are reported twice, once for each of the two shares.
e.g.
** /mnt/user/sqwrl **
Jun 27 21:45:33 OPEN => /mnt/disk5/email/sqwrl/dovecot.index.log
** /mnt/user/email **
Jun 27 21:45:33 OPEN => /mnt/disk5/email/sqwrl/dovecot.index.log
It appears that the per share filtering is being a touch simplistic and picking up the share string in *any* part of the file path, not just the third element after /mnt/disk<n>/.