What Extended Events should I use?

I have a scenario where a production SQL server appears to be completely clearing both the plan and buffer caches on a regular basis.

From the sys.dm_exec_query_stats and sys.dm_exec_procedure_stats DMVs I can see that plan cache is being cl