Orbilog Activity Monitor

Orbilog Activity Monitor is a WordPress activity log and audit trail plugin that helps you see who did what, when it happened, and where the activity came from.

Instead of trying to figure out what changed after an unexpected update, configuration change, or user action, Orbilog keeps a searchable history of important WordPress events in your site’s database.

Each activity log entry is designed to give you the essential context:

John Smith (Editor) updated the page “About Us” — 8 September 2026 at 10:30.

Why use a WordPress activity log?

An activity log, audit log, or audit trail gives site owners and administrators a history of important actions performed on a WordPress website.

Orbilog can help you:

• Monitor administrator and user activity.
• Investigate unexpected changes.
• Review login and account activity.
• Track changes to posts, pages, media, comments, plugins, themes, and settings.
• Keep a searchable history of important site events.
• Manage activity log retention and privacy settings.

What does Orbilog Activity Monitor record?

Login activity

Track successful logins, failed login attempts, logouts, password changes, and password reset requests.

User activity

Monitor user creation, updates, deletion, and role changes. Important account changes can be identified through the activity log.

Content activity

Track posts, pages, and supported custom post types when they are created, updated, published, scheduled, moved to the trash, restored, or deleted.

Media activity

Record media uploads, updates, and deletions.

Comment activity

Track important comment actions such as approvals, edits, spam, trash, and deletion.

Plugin and theme activity

Monitor plugin and theme installations, activations, deactivations, updates, deletions, theme changes, and supported file-editor activity.

WordPress core updates

Keep a record of WordPress core version changes.

Settings activity

Track important WordPress settings changes, including site information, registration settings, default user role, permalinks, reading, discussion, menus, and widgets.

Privacy-focused activity logging

Orbilog is designed to keep your activity log data within your WordPress installation.

• Activity log data is stored locally in your WordPress database.
• No third-party account is required to use the plugin.
• Passwords are not recorded in the activity log.
• Sensitive values such as reset links, tokens, cookies, and payment information are excluded from logging.
• IP address logging can be configured according to your privacy requirements.
• Logging errors are handled without preventing the underlying WordPress action from completing.

Search and filter your activity log

Find activity log entries using available search and filtering options.

You can filter activity by information such as:

• User
• Role
• Activity type
• Date range
• Severity
• IP address
• Event ID
• Content or activity title

Filtered activity log data can also be exported to CSV for further review.

Activity log retention

Choose how long Orbilog keeps activity log entries:

• 30 days
• 60 days
• 90 days
• 180 days
• 365 days
• Forever

Automatic cleanup can remove activity log entries after the selected retention period.

You can also configure exclusions for specific users, roles, or IP addresses where appropriate.

Role-based permissions

Orbilog provides separate permissions for managing different aspects of the activity log.

Depending on your configuration, permissions can be assigned for:

• Viewing activity logs
• Exporting activity logs
• Changing plugin settings
• Deleting activity log data

This allows site administrators to control which user roles can access different activity log functions.

WordPress privacy tools

Orbilog integrates with WordPress’s built-in personal data tools to help site administrators manage activity log data associated with users.

The plugin provides privacy-related controls for activity log data, including personal data export and erasure handling.

For specific legal or regulatory requirements, site owners should configure the plugin according to their own privacy policies and applicable laws.