I am having issues with the following macros -
[macros/conf-change]
access = read : [ * ], write : [ admin, power ]
export = system
owner = admin
version = 4.3.1
modtime = 1342048716.612678000
[macros/conf-change-user%281%29]
access = read : [ * ], write : [ admin, power ]
export = none
owner = admin
version = 4.3.1
modtime = 1342050821.201532000
They don't seem to exist.
The macros are in the TA-cisco_asa in macros.conf !
I was able to fix it by downloading and older version which has the macros.conf.
[conf-change]
definition = index=main eventtype=command-exec | transaction user startswith="configure terminal" endswith="write memory"
iseval = 0
[conf-change-user(1)]
args = user
definition = index=main eventtype=command-exec user=$user$ | transaction username startswith="configure terminal" endswith="write memory"
iseval = 0