About this task
Configuration events are logged to /var/log/audit_config.log only if you have enabled syslog forwarding for config audit. Configuration change logs are populated in the config topic in the audit back-end store under /ifs/.ifsvar/audit.
Configuration events are not forwarded to the Common Event Enabler (CEE).
- Click .
- In the Settings area, select the Enable Configuration Change Auditing check box.
- Click Save Changes.
You can enable forwarding of system configuration changes to syslog by running the isi audit settings global modify command with the --config-syslog-enabled option. This procedure is available only through the command-line interface.