audit log can also record all the CLIs that user executed on ConfD CLI as /confdConfig/cli/auditLogMode default value is ‘all’, while the netconf messages that were issued from netconf client are not recorded in auditLog, so I wonder if ConfD only takes the audit log as recording for login/logout and CLI history? What’s ConfD’s view on the Netconf audit?
If you want to add for example NETCONF log entries to the audit log too, you can register for receiving CONFD_NOTIF_NETCONF notificaions and put them into a merged audit log.
See confd_lib_events(3) man page and ConfD 6.3 UG Chapter 12. Notifications