Server Admin - checking the logs

last night some of my users stated they saw someone flying and I was the only admin online.

there was 2 airdrops and someone flew to both.

do the logs show who opened/looted stuff? if so what is the path and log file format so I can build a script to parse.

basically it would be great if there was that level of detail in the logs.

thanks!