The best way would be to use Log Insight (after vCenter is pointed at it, of course) and create an alert that forwards to vROps notifying you of a cluster-level configuration change. There are some other products out there that can do the same, and I believe (unless I'm mistaken) that HyTrust has such a product with CloudControl.