Review all the TDV cs_server_event(s).log file which could show an AUDIT entry with the details of the TDV Server configuration being changed.
For example -
2024-02-29 13:25:28.345 -0500 INFO AUDIT property=/server/webservices/communications/https/enabled has been changed from true to false 24 admin composite 24000 6836924513381 6836924513381 /server/webservices/communications/https/enabled true false
In the above AUDIT entry, you could infer that :
- The TDV Server property /server/webservices/communications/https/enabled was disabled (changed from true to false)
- It was changed by the admin user of the composite domain.
- The date and time of change was 2024-02-29 13:25:28.345 -0500.