Locate HA Fail Over in Logs?

We had a fail over incident in our HA cluster sometime over the weekend. Is there a word or phrase I can grep for in the system, corosync or pacemaker logs to determine exactly when it happened?