Is there a log anywhere that shows when UPM is started and stopped?
[x]inetd could be configured to log each time a pmmasterd process is started. A new pmmasterd process is started from [x]inetd for each Privilege Manager session which are recorded in the event log by default.
An eventlog entry such as the one below records the start time of the users session which is also the time a pmmasterd and pmlocald process would have been started to handle the session. If may be worth trying to find out a bit more about what the customer is trying to achieve by this to ensure we understand their requirements fully.
Accept 2008/04/25 16:15:03 email@example.com-> firstname.lastname@example.org
Command finished with exit status 0
May 20 17:10:43 t700 xinetd: START: pmmasterd pid=14542 from=192.168.10.3