Activity logs

The site’s Activity page answers “what happened here, and who did it”. It has two tabs, because there are genuinely two stories to tell: what was done through DashboardWP, and what happened on the WordPress site itself.

The Dashboard tab

Every action taken through DashboardWP is recorded automatically: plugin and theme operations, updates, backups and restores, security scans and remediations, one-click logins, settings and plan changes. Each entry shows what happened, when, and which dashboard user did it, which matters as soon as you work as a team. Nothing to configure; it is always on.

The WordPress tab

The dashboard only sees what goes through it. Changes made directly in wp-admin, by other admins, or by plugins happen behind its back, and that is what the WordPress tab covers: an on-site event log kept by the connector plugin.

It records, among other things: logins and failed logins, user changes, plugin and theme installs/activations/deactivations, core updates, content edits and deletions, and settings changes, regardless of who made them and where.

Turning WordPress logging on

On-site logging is off by default and the WordPress tab shows an enable prompt. Turning it on flips a switch in the connector; from then on events are captured. Turning it off stops capturing instantly, and a disabled log costs the site zero performance: the connector does not even register its listeners.

How it is stored

Events are written to a protected log file on the site (not the database, so a busy site’s tables stay lean), rotated by size, and the dashboard syncs the latest entries into its own cache for fast viewing. The file is blocked from web access.