Best practice for auditing requests?

Hi all. We have had requested that all API requests to certain endpoints create audit records. This is done for each request. You can see how this might get out of hand with the refetching that is done by default. While that can be configured on a per-query basis, I'm wondering if anyone else has had to support something like this and how you have gone about it.

Thanks.