--> Take out the Configuration files (bigip.conf) from both Active and Standby Devices.
--> Use Notepad++ to find out the differences between Active and Standby F5 LTM Devices.
Method2:
--> You can find out the recent changes without using the notepad++ in this method.
--> Just copy the configuration file (bigip.conf) from standby device to Active device using SCP Protocol.
--> Use the diff command to find out the differences between the Active and Standby.
# diff /config/bigip1.conf /var/bigip2.conf
Method3:
--> You can find out the recent changes without having the configuration of standby device in the Active F5 in this method.
--> Execute the below command to find out the recent changes performed on Active Device.
# show cm device-group <device-group name> incremental-config-sync-cache
Method4:
--> You can find out the recent changes without having the configuration of the standby device in the Active F5 in this method.
--> Execute the below command to know the time of the change as well the time when devices were in sync.
# show cm device-group < device group name> config-sync
CID Time (UTC) --> It shows the time of the recent configuration change
LSS Time (UTC) --> It shows the time when devices were in sync
--> Now once you found the time of the configuration change then you can search /var/log/audit files during that time to know the changes done on the device.
Method5
--> Upload the Active and Backup F5 device configuration files in ihealth portal and use the compare function to find the differences.
Method6
--> If you are using BIG-IQ also you can find the recent changes performed on BIG-IP devices.
Reference: F5.com
Md.Kareemoddin
CCIE # 54759