Ability to audit when staff are registering and managing their domain account.

I am using the Monitoring - Audit Logs to look at the logs of our users authenticating with their domain accounts.   I would like to see the volume of staff registering, unlocking, and resetting passwords for their accounts so that I can measure the value of Azure.

The challenge is there are so many events that I can only download the last 5000 events, which doesn't even give me a full 24 hours of activity.  I would like the last 30 days or last month of activity.

So I have been filtering the view using the Activity drop down, but there appears to be multiple Activity titles for every action, making it difficult to get a full picture.

Is there a good way to do this?

THANKS