This is a good explanation of what those logs are and how to access them.
https://www.thedfirspot.com/post/sum-ual-investigating-server-access-with-user-access-logging