Hi there.
psm1 is right - using the Nortel management software suite is definitely the best way. The problem is that LOG changes like this are part of the same Nortel collection method as is used for statistics, accounting, alarms etc. They are not easily accessible by a "sh log" type of command. If you have access to the network management server/s for your network (but not the NMS tools???) then you might still be able to pull out the log changes from the BDF (Bulk Data Format) files.
If you just have logon access to individual passports, but not the management system/tools, you can set an individual telnet etc session to have LOG data echoed to it, as shown below. Your login must have sufficient CommandImpact to allow this! Here, I used the "ME" command to see what session I was using (NMIS TEL SES/2) and turned on LOG datastream access in the second command. The first LOG output shows a record of me doing that, followed by a change I made using a different telnet session (which could have been somebody else) which wouldn't normally be seen. The LOG output only records add/set/delete (not display) commands, as well as act pr, etc...
This method is okay for monitoring changes on one or several passports, but not a large number. If it helps, your terminal session application may be able to stream its output to file...?
Passport1> me
EM/PASSPORT1 Nmis Telnet Session/2; Userid = admin
Impact = systemAdministration; Scope = network; CustomerId = 0
Mode = oper
ok 2004-09-03 17:25:44.06
Passport1> s nmis tel ses/2 data log
Nmis Telnet Session/2
ok 2004-09-03 17:26:06.84
Passport1>
LOG Nmis Telnet Session/2; 2004-09-03 17:26:06.85
userId = admin
sessionSequenceNumber = 100004
command = s nmis tel ses/2 data log
response = ok
Passport1>
LOG Prov; 2004-09-03 17:26:41.86
userId = admin
sessionSequenceNumber = 100003
command = st pr
response = ok
Passport1>
LOG Lp/8 X21/6; 2004-09-03 17:27:49.73
userId = admin
sessionSequenceNumber = 100003
command = s lp/8 x21/6 comment "This unauthorised change will
never be found"
response = ok
Passport1>
LOG Prov; 2004-09-03 17:28:04.51
userId = admin
sessionSequenceNumber = 100003
command = ch pr
response = ok
Passport1>
[confirm prov alarm]
LOG Prov; 2004-09-03 17:28:11.46
userId = admin
sessionSequenceNumber = 100003
command = act pr
response = ok
Passport1>
[activate prov alarm]
LOG Prov; 2004-09-03 17:28:16.69
userId = admin
sessionSequenceNumber = 100003
command = confirm prov
response = ok
Passport1>
LOG Prov; 2004-09-03 17:28:34.20
userId = admin
sessionSequenceNumber = 100003
command = en pr
response = ok
Passport1>