Last week I was asked to enabling Auditing for delete in all our sites in our farm. When I first iterated all the sites to check what values that already was there I got responses back like 584 and I was not sure how it all worked. Google helped me a bit on the way to find an answer.
SharePoint stores the auditflags in decimal form but they are made up from binary values.
List of Auditflags in SharePoint 2010:
Event to audit options in SharePoint interface
Documents and Items
|Opening or downloading documents, viewing items in lists, or viewing item properties||4|
|Checking out or Checking in items||1,2|
|Moving or copying items to another location in the site||4096,2048|
|Deleting or restoring items||8,64,512|
List,Libraries and Sites
|Editing content types and columns||32,128|
|Searching site content||8192|
|Editing user and permission||256|
This is provided as is.