Currently the API allows you to POST /rest/admin/1.0/auditlog/query (https://docs.atlassian.com/atlassian-crowd/5.0.0/REST/#admin/1.0/auditlog-searchAuditLog) but to capture them all you have to post all the actions and sources you want to capture. This would be easier if you could just 'GET' and have all the audit logs generated by Crowd.

You can do this with Confluence GET /rest/api/audit (https://docs.atlassian.com/ConfluenceServer/rest/6.15.1/#api/audit-getAuditRecords) and Jira GET /rest/auditing/1.0/events (https://confluence.atlassian.com/jiracore/audit-log-improvements-for-developers-1019401815.html) so it would be nice to also have this functionality for Crowd DC.