Can I see session logs from all the PAM appliances from one node in the cluster? We need to audit the usage within the cluster but we have to log into each node to review the session logs.
No, each node only stores session information from itself. You can send session information to a central log server using either syslog or Splunk integration. This would allow you to source all cluster session information from one place.