I am trying to get a notification via syslog when someone enters configuration changes on a switch.
I am using 12.4 ios with AAA and ACS.
I know that I can see this information under the acs reports but I'd like it in syslog also.
I have tried the following methods:
1. I have configured the switch to send a syslog trap when a configuration change is made but there is very little inforamtion in it.
A start/stop record time of the configuration change would be good.
2. I am able to create an exec start/stop record and that gets sent to the syslog.
I do not want this as it shows everytime a user logs onto a device.
3. I can use ACS to generate a syslog on AAA accounting or administrator but this shows a syslog everytime a users enters a show commands and not just configuation commands.