To start I wish to mention that you can avail of the Data Management add on which is specially designed to help you answer all the questions related to monitoring and more.
Also, in the past, similar questions have been posted and answered. Please see below
Monitor User Activity
Related to the behaviour you are seeing, I strongly advise opening a support case for each on
of the questions to rule out any possible product defect.
I hope it helps.