Hi
I assume you are trying to find out who is deleting modules?
Again, assuming every user in NOT an admin, you may have a small number of suspects
You could therefore use an SQL query to cross reference delete date/time with login / logout
Apologies I've not tested this but I was just working on a site and I noted the Recycle Bin had dates next to the modules I had deleted
If your site is used by a 'large' company then your users (with editing rights) may be departmental and control different parts of the site, create users and give selective rights by department
Failing all of the above - teach you users not to DELETE modules but to set the expiry date and get them to 'log' the action in the module header / footer
I hope one of these work for you :-)
Regards
Dave
P.S. Who is clearing the audit log?
Maybe do something to extract the log on daily basis and store in an offline databases - Access?