On Thu, Apr 19, 2012 at 05:47, Daniel Kertby <kertby(a)gmail.com&gt; wrote: If you are just looking for when the system pulled its kickstart down, you have a few options. /var/log/cobbler/install.log has the data. If you want it to show which profile they had at the time I'm sure it could be patched to support that (seems reasonable to me, just cause the host was installed doesn't mean someone hasn't changed the profile since). Also the data is in the apache logs. It doesn't tell you which specific profile/kickstart they had, just that theirs was pulled (same as the previous log). You can pull just the items you are talking about with this, if you haven't adjusted the log path from default: awk '/ks\/system/ { split($7,path,"/"); print $1" "$4" "$5" "path[7] }' /var/log/httpd/access_log That being said, ygor's anamon is what you want if you want more detailed logging of what happens during the installation.