I depends on the actions you performed on your cluster... The list of events which could be captured by the audit logs is here: Audit events | Elasticsearch Guide [8.9] | Elastic
See also this discussion: Does Elasticsearch capture audit logs for Query DSL, EQL and SQL or Not? - #2 by dadoonet