Hello Rajesh,
if you use TACACS+ servers with aaa new-model on devices you can trace what commands are placed on device and by who
example:
aaa new-model
!
!
aaa authentication login ACS group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa accounting update newinfo
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!
aaa session-id common
!
the key point is to have a message to be sent before reload happens
I cannot find the command
logging reload notification
in 12.4 mainline network management command reference.
Hope to help
Giuseppe
