On Thu, Nov 16, 2023, at 5:17 PM, William Faulk wrote:

Since asking the question, I've been doing some research and found that the "cn=changelog" tree is populated by the "Retro Changelog Plugin", and on my systems, that has a config that limits it to the "cn=dns" subtree in my domain. I


Retro changelog is not the changelog you are looking for :)


The cn=changelog5,cn=config entry contains the on-disk location of the changelog where its saved as a Berkeley DB. It's almost as easy to pull the same data out of there.

You could do that. Also I noticed there is code to dump the changelog to a flat file, but it isn't clear to me how to call it : 
https://github.com/389ds/389-ds-base/blob/main/ldap/servers/plugins/replication/cl5_api.c#L4273