Date & Time
The Change Tracking log viewer show the date and time of every change.
- The time is recorded as UTC (Coordinated Universal Time), and displayed using the current computer's time zone.
- The time format is determined by the user's long date & time format. If you want, you can change them from Control Panel -> Regional and Language Options -> Customize:
Many of the detail lines are fairly clear:
Web Listener [MyListener] [TCPPort] changed from  to 
But sometimes, they are not:
Policy Rule [MyRule] [LinkTranslationMode] is [fpcLinkTranslationOwa12Redirection]
What do those funny words mean? Fortunately, any of the terms starting with "fpc" can be searched on MSDN search. Try searching for fpcLinkTranslationOwa12Redirection - the explanation is right there.
Number of Changes
As you probably know, you can configure the number of changes that are kept in the Change Tracking log (default 1000). However, we already know that there are several change logs. The number of changes actually refers to each individual log. So, if you look at the Change Tracking viewer on an Enterprise Edition console, you may find 3000 entries: 1000 from the current array, 1000 from the enterprise, and 1000 from the enterprise policy.
I've been asked why Change Tracking doesn't log import operations. Well, Change Tracking does log the results of the import operations (what is different afterwards), just not the import operation itself. Note that a single Apply can include multiple imports, plus pre- and post-import modifications - how would you log that?
That said, we are considering adding in the future some support for logging import operations. In the meantime, you can note them manually in the description: "Imported Backup3.xml".
[TMG Update] TMG now logs import operations. If you import a file and then apply, the resulting Change Tracking entry will say "Imported file: c:\myfile.xml", and then the actual changes that result from the imported plus (and subsequent UI changes).
-Jonathan Barner, ISA Sustained Engineering Team