However on page 8 the document states that these "session logs" don't record commands, they're just audit logs of when, where, by whom the sessions were initiated.