WP Activity Log Premium: Trace WordPress Changes

Use event details to investigate WordPress changes

When a post, setting, or account changes unexpectedly, WP Activity Log Premium and WP Activity Log Enterprise give administrators and security professionals an activity trail to review across WordPress websites and multisite networks. A recorded event can show when it happened, which user and role were involved, the source IP address, and the affected object. For content changes, the log can also show what changed. These details support troubleshooting, user management, accountability, and compliance work.

Activity covered by the log

Events can include edits to posts, pages, and custom post types; changes to categories, tags, widgets, and menus; user and profile updates; WordPress options; add-on, theme, file, and database table changes; and access events such as logins, logouts, failed login attempts, and termination of other sessions. Multisite events can include adding, deleting, or archiving websites and changing which visitors belong to them.

Supported third-party integrations can extend event coverage to utilities such as WooCommerce, Advanced Custom Fields, bbPress, Gravity Forms, LearnDash, MemberPress, MainWP, ManageWP, Paid Memberships Pro, and RankMath. Depending on the integration, logged activity may include settings, content, orders, memberships, payments, subscriptions, forms, courses, and related user actions.

Premium review and reporting tools

• See who is logged in and review current activity; log off a user from the activity interface.
• Filter and search events to narrow an investigation.
• Generate configurable HTML and CSV reports, and export activity data for review and record keeping.
• Configure email, SMS, and Slack notifications for important changes.
• Add internal notes to activity entries for context.

Enterprise storage and log mirroring

Activity logs are stored in the WordPress database by default. Enterprise adds the option to save logs to an external database and mirror them in real time to log management and monitoring services such as AWS CloudWatch, Loggly, Papertrail, Syslog, and other SIEM systems. Logs can also be mirrored to Slack or copied to a log file on the web server. This includes settings for reviewing activity outside the main WordPress database or keeping a copy with operational monitoring entries.

Retention and setup

Activity data can be retained indefinitely. The default retention period is three months, and you can change it in the initial configuration wizard or plugin settings.

1. Install and activate WP Activity Log.
2. Run the initial configuration wizard or open the plugin settings.
3. Choose retention policies and review the activity logging options.
4. Configure reports, alerts, session controls, storage, or mirroring according to the selected edition and operational needs.
5. Review the activity log and use filters and reports to investigate changes or document website activity.