We are trying to run a report that shows all commands on firewalls within a given day for our PCI audits. With the MARS, any command other than show, obviously gives the above output in the email sent to managers and you must log in to see the actual commands. This can get very tedious if several commands were inputted that day. Is there a way to modify the report to actually list the commands instead of giving this generic description?
Have you tried running the report type as "All Matching Event Raw Messages"? It's not 100% clean exactly, but it does include the commands issued.