when i looked at my logs:
the system log would show when the admin logged in and out, when the 323 was rebooted, stuff of that nature
the get and put commands, the user and the file
not sure if it shows anymore, that's all mine shows right now
hope that helps