i have issue with HP NA , that it take Snapshot everytime when i login to any device through the HP proxy window interface and log the below as a comment on the snapshot task .
Change detection: accessed by system through proxy interface at 2013-04-24 20:24
Here are the below logs from the switch after logging there are no matched with and syslog message to detect any config change !!
001516: Apr 24 20:24:25.290 QST: %SSH-5-SSH2_SESSION: SSH2 Session request from 172.23.19.26 (tty = 0) using crypto cipher 'aes128-cbc', hmac 'hmac-sha1' Succeeded
001517: Apr 24 20:24:25.326 QST: %SSH-5-SSH2_USERAUTH: User 'hpov' authentication for SSH2 Session from 172.23.19.26 (tty = 0) using crypto cipher 'aes128-cbc', hmac 'hmac-sha1' Succeeded
Syslog Detection Patterns
Login permitted from
User .* executed the .*(write mem|copy run|copy start|erase).*command