How to check user activities.

Hi all,
        In my web application how can I check user activities.
        The application does not maintain audit trails where all user activities have been logged in. In case a malicious user tries to attack the application; the application will not be able to trace the attacker.
how can i have records of user?
Thanks