You can see when someone connects to the array via the symaudit CLI output. It will not show the actions performed but you can see the connect and disconnect times.

I hope this can be found from the symmwin.

Regards,

Periyakaruppan N (Peri),

I am not aware of any change in symwin that is not logged somewhere. It is very likely to be logged, although I don't know where for that type of change.

I said because, the changes done thru symwin may be found in the audit log. And the –v would give you the detail of each log entry.

I remember from past, the inline command that was executed from symwin by EMC personal was found with symaudit –v.

Regards,

Periyakaruppan N (Peri),

Well, Jason's suggestion is valid that it can be found in the audit logs but it may not tell you what exactly was performed (I dont know). SymmWin does have an audit log saved on the service processor which can tell you when was the lock released?