log files for mysql, probably keep track of what users have done to the database, open them with a text editor and see what they say
use logrotate to manage them if they are getting out of hand
when sys logging is turned on in linux, its keeps a log of everything, and I mean everything possible, its one of the strengths of the OS, you can always see what's happening