How to audit incoming CORS Requests?

We're attempting to audit our CORS Origin allowed URLs to see if any of our current allowed URLs are not needed anymore. Is there a way within Event Monitoring, or any other solution, to identify all incoming CORS requests to our org? It's easy to identify violations, but I'm trying to compile a list of the URLs for successful CORS origin requests.

Thank you! 

#Security