Audit log
3 answers
Who changed what, when, and from where.
Looking for something specific
The searchable index covers all 326 answers at once and filters as you type.
248 Find out who changed something
Audit Log. Every configuration change, every apply, and every sign in including the failed ones, with the actor and the source address.
The log is written on the node where the thing happened and does not travel. If you cannot find something, check the other node.
249 Why is the audit log different on each node?
Deliberate. A log that traveled between machines could claim something was done on a server that never did it, which would make it useless as a record. The small inconvenience of looking in two places is the price of the log meaning what it says.
250 Export the audit log
Through the JSON API, which is the sensible way to get it into whatever you use for log analysis.