Refactoring audit logs