Under Policies | Audit we again see a very lenient default setting. By default there is no auditing. A more reasonable setting is shown in this example (you may have to enlarge to see detail).