Audit logs.
In info mode (the default), it doesn't log the change, just where the change was made.
Fri Feb 18 11:53:03 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Event: /cluster/mail_policies/hat/exception_table
Fri Feb 18 11:53:04 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Location: /cluster/mail_policies/hat/exception_table, Event: User visited the web page.
Fri Feb 18 11:53:09 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Location: /cluster/mail_policies/hat/exception_table, Event: User visited the web page.
Fri Feb 18 11:53:23 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Event: /cluster/mail_policies/hat/exception_table
Fri Feb 18 11:53:23 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Location: /cluster/mail_policies/hat/exception_table, Event: User visited the web page.
Fri Feb 18 11:53:23 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Location: /cluster/mail_policies/hat/exception_table, Event: User visited the web page.
Fri Feb 18 11:53:23 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Location: /cluster/mail_policies/hat/exception_table, Event: User visited the web page.
Fri Feb 18 11:53:28 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Location: /cluster/commit, Event: User visited the web page.
Fri Feb 18 11:53:30 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Event: /cluster/commit
Fri Feb 18 11:53:30 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Location: /cluster/commit, Event: User visited the web page.
Fri Feb 18 11:53:30 2022 Info: Appliance: esa1.opus.corp.root, User: kenst, Event: The following configuration changes were commited with comment - 'N/A'
Fri Feb 18 11:53:30 2022 Info: * [cluster] Sender Verification Exception Table
Fri Feb 18 11:53:30 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Event: /cluster/mail_policies/hat/exception_table
Fri Feb 18 11:53:30 2022 Info: Appliance: esa1.opus.corp.root, Interaction Mode: GUI, User: kenst, Source IP: 172.28.0.82, Location: /cluster/mail_policies/hat/exception_table, Event: User visited the web page.