Real-Time Change Detection with Cisco SG300

Hi,

I would like to save real-time configuration changes of our Cisco SG300.

With our Cisco 3750X I can do this. They send syslog messages "1117290: 1117291:   Configured from console by admin on vty10 (...)" and NCM react with saving of config.

The SG300 sends syslog message "1 2016-04-13T15:26:26+01:00 SW-IT-ACC-1 COPY - FILECPY - Files Copy - source URL running-config destination URL flash://startup-config, aggregated (1)" and NCM doesn't save the config. Where can I configure how NCM reacts to a which kind of syslog message?

Thanks,

wolliballa