How do I query the repository for user actions

Hi all,

We recently had a user performing some unwanted actions (creating document types) in our CMS, and we’re trying to retrace all his actions. I tried to query the repository using SQL (Repository Event Log - Bloomreach Experience Manager - The Fast and Flexible Headless CMS), but querying on hippolog:user, or variations of that, do not yield results. Is it possible to retrace the document types this user created?