A security auditor requests that every command entered by network administrators on Cisco IOS switches be recorded in ISE so that a complete audit trail is available, including who ran each command and when. Device administration via TACACS+ is already working for authentication and command authorization. Which additional configuration on the IOS switch is required to satisfy the auditor's requirement?