Avaya SBC logs every attempted or completed change activity on OS/CLI level in the commandhistory log file in the /archive/log directory. The format of the commandhistory file is as follows:
timestamp | Session: xx.dd.yy.xx | User: xyz | IP: xxx.xxx.xxx.xxx | SID: xxx | PPID: xxx | PID: xxx | Command: xxx | Result: SUCCESS or FAILED"
Note:
SID and PPID can be used for auditd logs search along with command and timestamp.
