who changed client ssl on ltm

Navigate to System > Logs > Audit.

 

You might be found relate user that change configuration.

 

Thank you very much. I could see the date and time when it was changed. Could you please help me with one thing? How to see the IP associated with the ID who changed it?

 

example ...i could see userA changed it but it dont show IP

 

Hi Neeraj,

You can try the below,

cat /var/log/secure | grep userA

The output would be somewhat like this,

user=userA host=x.x.x.x attempts=1 start="

In case your logs have been rotated, you would find the files in .gz extn. For viewing the extension files use the zcat command,

zcat /var/log/secure.1.gz | grep userA

or wildcard,

zcat /var/log/secure.* | grep userA