audit_log_user_message question