IPAM events are only triggered if you make the change via IPAM (remove DNS or add DNS record). It doesn't report change after each scan of DNS zone.
What's the use case behind your alert. do you want to watch specific DNS zones and records and make sure unauthorized person does not delete records? Also, how it should behave with DDNS enabled?
thanks a lot for feedback.