I have an external logging enabled (journal) and I noticed, the destroy audit messages are not being generated on deleting an org.
I can see the audit created in the foreman UI tho.

I tried to delete other items such as os and architecture, which correctly generated the audit message:

{
    "SYSLOG_IDENTIFIER" : "foreman",
    "SYSLOG_FACILITY" : "176",
    "PRIORITY" : "6",
    ...
    "FOREMAN_LOGGER" : "audit",
    "AUDIT_ACTION" : "destroy",
    "AUDIT_TYPE" : "Architecture",
    "AUDIT_ID" : "7",
    "AUDIT_NEW" : "foo",
        ...
}