sp_audit for the Cluster Edition includes the cluster option which enables you to audit cluster commands. The syntax for sp_audit is:
sp_audit ‘cluster’, login_name, object_name [,setting]
Once enabled, the cluster option audits these commands on the cluster:
sp_cluster 'logical', 'online', cluster_name
sp_cluster 'logical', 'failover', logical_cluster_name, 'cluster' [, instance_list [, wait_option [, time [, @handle output]]]]
sp_cluster 'logical', 'failback', logical_cluster_name, 'cluster'
sp_cluster 'logical', 'failover', logical_cluster_name, 'instance', from_instance_list, instance_list [, wait_option [, time [, @handle output]]]]
sp_cluster 'logical', 'failback', logical_cluster_name, 'instance', from_instance_list, instance_list [, wait_option [, time [, @handle output]]]
sp_cluster 'logical', 'offline', cluster_name, 'instance', instance_list
sp_cluster 'logical', 'offline', cluster_name, 'cluster'
sp_cluster 'logical', 'action', logical_cluster_name, 'cancel', handle
sp_cluster 'logical', 'action', logical_cluster_name, 'modify_wait', handle, wait_option [, time]
sp_cluster 'logical', 'action', <lcname>, 'release', <handle>
sp_cluster 'logical', 'drop', logical_cluster_name, 'cluster'
