Hi
You could try scanning the logs for convergence events:
file search activelog / MASTER_ELECTED recurs reltime days 30
RTMT logs alerts, but it's a bit chatty... e.g. serverdown alerts or syslogseveritymatchfound alerts may indicate a key service restart, or a trivial service restart that didn't affect service really.
Aaron
Aaron
Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!