Did you ever wonder who changed some backup schedule, or added new clients in a specification? There is a handy global file option that might help:
EventLogAudit=1
# default: 0
# This option enables (1) or disables (0) logging of GUI-related user actions
# into the Data Protector event log. Logging is disabled by
# default.
When enabled it logs events like:
Normal DATE TIME GUI/CLI EventLogTrigger "[138:719] Media "Media_Name" was recycled by user "GROUP\USER"."
Normal DATE TIME GUI/CLI EventLogTrigger "[138:719] Operation "Specification Modification" performed by the user "GROUP\USER" on the backup specification(s) "NAME"."