How to make application audit logs useful for security reviews

Application audit logs are one of those things every product says it has, but many of them are almost impossible to use when a real review starts. I learned this the hard way on a SaaS admin tool where the log only said, "user updated settings." That looked fine on a dashboard, but it did not answer the basic questions: who changed it, what record changed, what value moved, and which request…