What type of logs contain all the configuration changes made by an administrator?

Auditing logs are specifically designed to track and record configuration changes made by administrators. These logs provide a detailed history of changes within the system, such as updates to firewall rules, modifications to settings, and any alterations to the device configuration. By keeping a comprehensive record, auditing logs help ensure accountability and traceability, allowing administrators to review who made changes, what those changes were, and when they occurred.

In contrast, connection logs primarily focus on the traffic and connections passing through the firewall, while system logs capture broader system activity and performance information. Event logs typically document significant system events or alerts but do not specifically track configuration alterations in the detail that auditing logs provide. Thus, auditing logs are the most appropriate choice for the question regarding the documentation of configuration changes by an administrator.