This message was deleted.

I use syslog with specific keyword to get this type of distinction. I don't know a way to do historical easily I'm afraid.

We ingest the netscaler syslog in Splunk in order to get the historical.