Activity Log
A chronological audit trail of all actions taken by admin users.
TL;DR
Admin → Activity Log: view a paginated log of every admin action. Filter by subject type (post, page, user, theme, setting, marketplace). Requires the admin.settings permission.
Details
What Is Logged
The ActivityLogger service records an entry every time an admin performs a significant action. Each log entry stores:
| Field | Description |
|---|---|
user_id |
The ID of the admin who performed the action |
username |
The username at the time of the action |
action |
Dot-notation action code, e.g. post.created, settings.updated |
subject_type |
Category: post, page, user, theme, setting, marketplace, backup, update, plugin |
subject_id |
The ID of the affected record (nullable for system-level actions) |
description |
Human-readable description of what happened |
ip_address |
The admin's IP address |
created_at |
Timestamp of the action |
Actions Logged
- Posts: create, update, delete, publish, schedule
- Pages: create, update, delete
- Users: create, update, delete, role change
- Themes: activate, deactivate, install, delete
- Widgets: install, delete
- Plugins: activate, deactivate, install, delete
- Settings: save (general, SEO, social, sharing, updates, hCaptcha)
- Marketplace: install (free), install (licensed/premium)
- Backups: create (manual, pre-update, pre-rollback, post-rollback)
- CMS Updates: update applied, rollback applied
- Imports: WordPress import completed
Filtering
The Activity Log page includes a Subject Type filter dropdown. Select a type to narrow the log to only that category of actions. The list is paginated (25 entries per page) with newest entries first.
Access Control
Viewing the Activity Log requires the admin.settings permission. Superadmins always have access. Editors and authors do not have access by default.
Use Cases
- Auditing: who published that post? Who changed the site title?
- Debugging: did the auto-update run? When was the last backup created?
- Multi-admin accountability: track which admin made a change on a shared site.