About this plugin
Orbilog Activity Monitor is a WordPress activity log and audit trail plugin that helps you see who did what, when it happened, and where the activity came from.
Instead of trying to figure out what changed after an unexpected update, configuration change, or user action, Orbilog keeps a searchable history of important WordPress events in your site’s database.
Each activity log entry is designed to give you the essential context:
>
John Smith (Editor) updated the page “About Us” — 8 September 2026 at 10:30.
Why use a WordPress activity log?
An activity log, audit log, or audit trail gives site owners and administrators a history of important actions performed on a WordPress website.
Orbilog can help you:
- Monitor administrator and user activity.
- Investigate unexpected changes.
- Review login and account activity.
- Track changes to posts, pages, media, comments, plugins, themes, and settings.
- Keep a searchable history of important site events.
- Manage activity log retention and privacy settings.
What does Orbilog Activity Monitor record?
Login activity
Track successful logins, failed login attempts, logouts, password changes, and password reset requests.
User activity
Monitor user creation, updates, deletion, and role changes. Important account changes can be identified through the activity log.
Content activity
Track posts, pages, and supported custom post types when they are created, updated, published, scheduled, moved to the trash, restored, or deleted.
Media activity
Record media uploads, updates, and deletions.
Comment activity
Track important comment actions such as approvals, edits, spam, trash, and deletion.
Plugin and theme activity
Monitor plugin and theme installations, activations, deactivations, updates, deletions, theme changes, and supported file-editor activity.
WordPress core updates
Keep a record of WordPress core version changes.
Settings activity
Track important WordPress settings changes, including site information, registration settings, default user role, permalinks, reading, discussion, menus, and widgets.
Privacy-focused activity logging
Orbilog is designed to keep your activity log data within your WordPress installation.
- Activity log data is stored locally in your WordPress database.
- No third-party account is required to use the plugin.
- Passwords are not recorded in the activity log.
- Sensitive values such as reset links, tokens, cookies, and payment information are excluded from logging.
- IP address logging can be configured according to your privacy requirements.
- Logging errors are handled without preventing the underlying WordPress action from completing.
Search and filter your activity log
Find activity log entries using available search and filtering options.
You can filter activity by information such as:
- User
- Role
- Activity type
- Date range
- Severity
- IP address
- Event ID
- Content or activity title
Filtered activity log data can also be exported to CSV for further review.
Activity log retention
Choose how long Orbilog keeps activity log entries:
- 30 days
- 60 days
- 90 days
- 180 days
- 365 days
- Forever
Automatic cleanup can remove activity log entries after the selected retention period.
You can also configure exclusions for specific users, roles, or IP addresses where appropriate.
Role-based permissions
Orbilog provides separate permissions for managing different aspects of the activity log.
Depending on your configuration, permissions can be assigned for:
- Viewing activity logs
- Exporting activity logs
- Changing plugin settings
- Deleting activity log data
This allows site administrators to control which user roles can access different activity log functions.
WordPress privacy tools
Orbilog integrates with WordPress’s built-in personal data tools to help site administrators manage activity log data associated with users.
The plugin provides privacy-related controls for activity log data, including personal data export and erasure handling.
For specific legal or regulatory requirements, site owners should configure the plugin according to their own privacy policies and applicable laws.