I said in my previous post. It should be in the default trace.

Also, taking a DB offline or bringing it online requires high permissions, so ask the people who have such permissions whether they ran the command and if so, why