Logging user activity in audit.log
By default, the audit.log captures:
User login
User impersonate
Modify the logging level of the systemlogger.xml file to provide additional information about a user's activity in the Portal. You can set the level to info to capture only what a user deletes OR set it to debug to capture all the user activity (including all deletes).