Activity log for WordPress

What it does

When something breaks (or someone claims they did not touch anything), the activity log settles it. Every tracked action lands in a searchable trail: logins, content edits, plugin installs and deactivations, theme changes, role changes.

It is also the raw material for the rest of the monitoring stack: the incident engine correlates these events into attack timelines, and compliance reports are generated from this same data.

How it works

Event capture is per domain (user, post, plugin and theme events each have their own toggle), and retention defaults to six months, configurable from one to twenty-four, so the log never grows without bound. Exports come out as CSV or JSON with column selection and filters; ranges beyond five thousand events export in the background instead of tying up the admin.

For teams with central logging, the mirror service queues events out to syslog, AWS CloudWatch, Loggly, Papertrail, a custom webhook or an external database.

• Per-domain event toggles; retention 6 months by default (1 to 24)
• Filterable dashboard with full event detail
• CSV and JSON export with column selection
• WooCommerce order and product events when WooCommerce is active
• Background export mode for large ranges
• Log mirroring to 6 destinations

And in the free plugin?

Free ships a lighter event logger and a login-activity snapshot on the dashboard. The full trail (content, plugin and theme events with export and mirroring) is Pro.