Session closed by an administrator

A user tells us that she was excluded from a room by a moderator.
Unfortunately in the logs (catalina.out) there is no evidence of this activity.
In particular, it is not possible to trace the moderator.
There are best practices, how we should proceed for the analysis