Activity Logs
Understand Activity Logs
The Activity Logs tab provides a detailed record of all login attempts on your WordPress admin dashboard and significant administrative actions taken on your WordPress site.
Login Activity Logs
The Login Activity Logs section provides a record of all login attempts to your WordPress admin dashboard, including successful and failed login attempts, along with details such as timestamps, user information, IP addresses, and user agents.
This is only visible if Login Activity Log under Login Security is enabled.
-
Navigate to the Activity Logs tab.
-
In Select Log, choose Login Activity.
The number in brackets indicates the total number of logs currently available to view. 
-
Review the login activity details referring to the following table for descriptions of each column and available filters.
Column Description Timestamp
The date and time when the login attempt occurred.
User
The username of the account that was used for the login attempt.
Role(s)
The role(s) assigned to the user account that was used for the login attempt.
IP Address
The IP address from which the login attempt originated.
Status
The result of the login attempt, and available results are:
-
Success — The login attempt was successful.
-
Failure — The login attempt failed.
-
All — Show all login attempts.
User Agent
The user agent string of the browser or tool used for the login attempt, which can provide information about the device and software used.
Actions
Date range
Filter logs by a specific date range.
Available ranges are:
-
All Dates
-
Last 7 days
-
Custom range
Status
Filter logs by status. Available statuses are:
-
Success
-
Failure
-
All Statuses
Filter
Apply the selected filters to the log list.
-
Admin Audit Logs
The Admin Audit Logs section provides a record of significant administrative actions taken on your WordPress site, such as changes to settings, plugin installations and user management.
-
Navigate to the Activity Logs tab.
-
In Select Log, choose Admin Audit Log.
The number in brackets indicates the total number of logs currently available to view. 
-
Review the list of admin actions referring to the following table for descriptions of each column and available filters.
Column Description Timestamp
The date and time when the admin action occurred.
User
The username of the admin who performed the action.
Action
The type of admin action that was performed.
Role Change
If the admin action involved a change in user roles, this column shows the previous and new roles.
Source
The source or location where the action was initiated.
Trust Level
The trust level of the action, which can help identify potentially risky actions.
The possible levels are:
-
Suspicious — Indicates that the action is potentially risky and should be reviewed.
-
Trusted — Indicates that the action is considered safe based on the user’s history and behavior.
Actions
Date range
Filter logs by a specific date range.
Available ranges are:
-
All Dates
-
Last 7 days
-
Custom
Status
Filter logs by trust level.
Available levels are:
-
Suspicious — Indicates that the action is potentially risky and should be reviewed.
-
Trusted — Indicates that the action is considered safe based on the user’s history and behavior.
-
All Statuses — Show all admin actions regardless of trust level.
Filter
Apply the selected filters to the log list.
-