Exactly, logs are for auditing - so they aren't reviewed unless someone is already suspected of something. Same goes for logins/logouts to the authentication s

Exactly, logs are for auditing - so they aren't reviewed unless someone is already suspected of something. Same goes for logins/logouts to the authentication systems. No one is sitting there staring at the log files.