Actually, this is not exactly what I want. I want the user to connect via SSH or WEB and generate an alarm in the form of a configchange log of any change he makes.
... then you're likely looking at TRAP or SYSLOG interception. The switch would be responsible for generating SYSLOG or TRAP messages for any configuration change and upon receipt you can configure a custom Log Criteria alarm to intercept the SYSLOG/TRAP and alarm.
You may be looking for something similar to https://extremeportal.force.com/ExtrArticleDetail?an=000078201. Note that this will only alarm/notify that a configuration change has occurred; not the actual differences in the configurations themselves.
