Please use the PowerShell cmdlet Get-AdfsProperties -AuditLevel to ensure audit logs aren't in disabled state. Read more about AD FS audit logs. Notice if there are audit settings pushed to the AD FS server, any changes with auditpol.exe will be overwritten (event if Application Generated isn't configured). In this case, set the local security policy to log Application Generated failures and success.