Bulk Updates aren't logged accurately in Audit logs.
It seems only first record is stored within the logs while remaining records aren't stored leaving you without options to review actions from users.
Let me know if you need help replicating this behavior.