Config change log in Ironport

[paladion.soc]

I want to know the configuration changes made by user(admin) on Ironport mail gateway. I do not want to depend on users comment in change but want to find out actual change log. which can give what was changed. Please let me know if they is any way to do so.

[Libin Varghese]

Hi,

All commit made to the appliance are logged in the system logs. So searching for the word commit in the system logs would show you when changes were made along with any comments that were provided.

You can also configure configuration history logs under System Administration -> Log Subscriptions to save a copy of the configuration file automatically whenever a commit is performed. You can then compare the configuration files to see what changes were made.

You should be able to download the log files directly from Log Subscriptions or by using FTP to the device.

If this does not match your requirement there is the below feature request for ESA to enhance logging further.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCzv82635/?reffering_site=dumpcr

Thank You!
Libin Varghese

[Solobone22]

How do you enable automatic config backups when committing changes?

"You can also configure configuration history logs under System Administration -> Log Subscriptions to save a copy of the configuration file automatically whenever a commit is performed. You can then compare the configuration files to see what changes were made."