we've a reporting requirement for certification to report what metrics are monitored (and especially where was something changed, so a history of configurations):
To get to that I looked at:
The closest is the anomalyDetection Config-API, but I do not see a way to get those definitions on a per-host basis, or am I missing something?
I mentioned the anomalyDetection, and it only tells the anomalyDetection on a global scale, not the host-based sacele.
Audit API is good... well, but I basically need a snapshot "at a time", which this can not deliver except if I track the changes properly myself.