Enabling the Configuration-Change Logger

You can enable a configuration logger to keep track of configuration changes made with the command-line interface (CLI).

When you enter the logging enable configuration-change logger configuration command, the log records the session, the user, and the command that was entered to change the config. You can configure the size of the configuration log from 1 to 1000 entries (the default is 100).

You can clear the log at any time by entering the no logging enable command followed by the logging enable command to disable and re-enable logging.

This example shows how to enable the configuration-change logger and to set the number of entries in the log to 500.

Switch(config)# archive 

Switch(config-archive)# log config

Switch(config-archive-log-cfg)# logging enable

Switch(config-archive-log-cfg)# logging size 500

Switch(config-archive-log-cfg)# end

This is an example of output for the configuration log:

Switch# show archive log config all         

 idx   sess           user@line      Logged command

   38    11   unknown user@vty3     |no aaa auth config-commands 

   39    12   unknown user@vty3     |no aaa auth network def gro radius 

   40    12   unknown user@vty3     |no aaa acc dot1x def start-stop gro rad

   41    13   unknown user@vty3     |no aaa acc system default 

   42    14           temi@vty4     |interface GigabitEthernet4/0/1 

   43    14           temi@vty4     | switchport mo trunk 

   44    14           temi@vty4     | exit 

[*] Configuration-Change Logger

biOos