To expand on this - the filtering options for the audit logs seems to apply a filter after fetching the first 1,000 results.

This could mean that we only see a small(er) number of records, rather than a complete history - e.g. if there are records beyond the first 1K which would match the filter criteria.

I'd expect filtering & pagination to work together, to provide admin users with a complete list of matching records.