The information should be in the event log (network wide -> event log). Or if you export logs to a syslog server, you can find it there. ... View more