3.8.1. About Management Interface Audit Logging
When audit logging is enabled, all operations carried out via the management API can be recorded in an audit log. Whether those operations are carried out via the management console, management CLI interface, or a custom-written interface, all are subject to audit logging. By default, audit logging is disabled.
Before being stored, log entries pass through a formatter and handler. The formatter specifies the format of the log entries, while the handler outputs the records to the specified destination(s). Only one formatter is currently available, which outputs entries in JSON format. A handler may be configured to output log records to a file, forwarded to a Syslog server or both.