The user command in the
audit log shows the xpath format for NETCONF configurations. For example:
SLX# show logging auditlog
0 AUDIT, 2020/02/20-22:45:57 (GMT), [DCM-1006], INFO, DCMCFG, admin/admin/134.141.219.78/ssh/netconf,, SLX, Event: database commit transaction, Status: Succeeded, User command: /brocade-interface:interface/ethernet[name="0/26"]/switchport-basic/basic.
1 AUDIT, 2020/02/20-22:52:23 (GMT), [DCM-1018], WARNING, DCMCFG, admin/admin/134.141.219.78/ssh/netconf,, SLX, Event: database commit transaction, Status: %% Error: Remove L3 configuration from the interface, User command: /brocade-interface:interface/ethernet[name="0/1"]/switchport-basic/basic, /brocade-interface:interface/ethernet[name="0/2"]/switchport-basic/basic, /brocade-interface:inte.