/var/log/messages file is filled with Audit Logs for Gaia Clish commands:
clish[PID]: user logged from admin clish[PID]: cmd by admin: Start executing : xxx (cmd md5: ...) clish[PID]: cmd by admin: Processing : xxx (cmd md5: ...) clish[PID]: cmd by admin: Start executing : exit (cmd md5: ...)
By default, Audit Logs for Gaia Clish commands are written by the clishd and xpand daemons with local0 priority to the /var/log/messages file.
clishd
xpand
local0
/var/log/messages