Audit Logging on LTM and GTM

We have noticed that on our LTM's the audit logs roll quickly and the log entries are not present for any config changes via the GUI, only logins.  We would like to configure only user changes to be sent to syslog and I have found some posts regarding this but wanted to ask the question here to get some clarification.  The MCP Service is set to Notice and enabled.

We have our syslog server setup for remote syslog but I don't think any change information is being sent at this point and again would like to isolate to only user changes not system notifications at this point.

Thanks,

Joe