WPBeginner

Beginner's Guide for WordPress

  • Blog
    • Beginners Guide
    • News
    • Opinion
    • Showcase
    • Themes
    • Tutorials
    • WordPress Plugins
  • Start Here
    • How to Start a Blog
    • Create a Website
    • Start an Online Store
    • Best Website Builder
    • Email Marketing
    • WordPress Hosting
    • Business Name Ideas
  • Deals
    • Bluehost Coupon
    • SiteGround Coupon
    • WP Engine Coupon
    • HostGator Coupon
    • Domain.com Coupon
    • Constant Contact
    • View All Deals »
  • Glossary
  • Videos
  • Products
X
☰
Beginner's Guide for WordPress / Start your WordPress Blog in minutes
Choosing the Best
WordPress Hosting
How to Easily
Install WordPress
Recommended
WordPress Plugins
View all Guides

WPBeginner» Blog» Plugins» How to Monitor User Activity in WordPress with Security Audit Logs

How to Monitor User Activity in WordPress with Security Audit Logs

Last updated on December 10th, 2020 by Editorial Staff
295 Shares
Share
Tweet
Share
Pin
Free WordPress Video Tutorials on YouTube by WPBeginner
How to Monitor User Activity in WordPress with Security Audit Logs

Do you want to monitor user activity on your WordPress site?

Running a multi-author blog or membership site comes with its own unique challenges such as stopping spam registrations and managing editorial workflow.

One solution that owners and admins of multi-user WordPress sites seek out is the ability to easily monitor user activity on their website.

This allows them to put a check and balance system in place. If things go out of control, then they can easily figure out what went wrong, who did it, and how to fix it.

In this article, we will show you how to monitor user activity and keep a security audit log in WordPress.

Monitor User Activity in WordPress

Why You Should Enable WordPress Activity Monitor and Logs?

A common objection that often comes up is you shouldn’t give WordPress login access to anyone that you don’t trust. If you do that, then you won’t need an activity tracking solution.

That’s a bit extreme because there are several very valid use-cases of activity logs.

Sometimes users can accidentally make an error or mistake that may break your WordPress website. Having an activity tracking log helps you identify and fix those issues faster.

Since the audit logs will show you which user made the mistake, you can also educate them on best practices to prevent the same mistake in the future.

A good example is if a moderator approved a comment that doesn’t fit your comment guidelines, then you can quickly correct their mistake and also notify them about it.

Another very good use-case for security audit logs is when you hire a WordPress developer from third-party contract websites like Codeable, Upwork, etc.

While most developers are trustworthy, sometimes you will run into a dishonest developer who can cause your business to lose significant amount of money.

Recently one of our Facebook group members reported that a developer she hired from Upwork changed the PayPal address in her WooCommerce store.

Upwork Scammer

These kind of subtle changes are extremely hard to detect unless you have a WordPress user audit log that keeps track of all activity.

Several years ago this issue happened to WPBeginner founder, Syed Balkhi, where a freelance developer quietly changed several of his affiliate links. Syed caught and fixed the issue thanks to a security audit log plugin.

With the above benefits in minds, let’s take a look at how to set up and monitor user activities on your WordPress website.

We will share two WordPress audit log plugins.

  1. Simple History (free plugin, but not as robust)
  2. WP Activity Log (best-in-class for what it does)

Monitoring User Activity with Simple History

Simple History is a free user activity monitoring plugin for WordPress, but it is not as feature rich. If you run a small website or WordPress blog, then this plugin will work for you.

The first thing you need to do is install and activate the Simple History plugin. You may follow our beginner’s guide on how to install a WordPress plugin for detailed instructions.

Upon activation, head over to Settings » Simple History from the left sidebar of your WordPress admin panel.

Simple History plugin settings page

On the settings page, you can choose whether you want the activity log to appear on the dashboard, on a separate page, or both.

You can also decide the number of items that will appear on the Dashboard and the log page.

By default, the Simple History plugin cleans the activity log history that is older than 60 days. You can also delete the history manually by clicking on the Clear log now button on the settings page.

This plugin allows you to monitor the history with the help of a secret RSS feed. However, you need to check the “Enable RSS feed” option to use it.

Viewing User Activities with Simple History

To check the user activity log, you need to visit the Dashboard » Simple History page. You can also view them on the Dashboard, but this will depend on how you have configured the settings of this plugin.

Simple History user activity log

This plugin displays the events of the last 30 days by default. You can change it to a fixed range (up to 60 days) or to a custom range by clicking on the Dates dropdown menu.

To search for specific events on your site, you need to click on the “Show search options” link. This will open up a number of fields. You can either use a single field or a combination of them to find the desired data.

Simple History activity log search options

For example, you can use the Users field to find someone and then, click on the Search events button to see the activities of that person in the last 30 days.

By default, the Simple History plugin allows you to monitor login, logout, wrong password, post/page editing, media upload, plugin install/update, user profile changes, and more.

It also has support for bbPress forums which lets you see the forum and topic activities on your website.

Simple History allows you to add your own custom events as well. If you have development experience and want to add a custom event, then you can check out the details on this page.

Monitor User Activity using the WP Activity Log

Although Simple History does a good job of tracking user activities on your website, it is limited in functionality.

If you are looking for a plugin that provides detailed and real-time user activity reports, then you should use the WP Activity Log plugin.

It is a feature-rich plugin that allows you to keep track of every change that happens on your website. You can also get email and SMS notifications for important site events.

To get started, you need to install and activate the WP Activity Log plugin on your WordPress site.

Upon activation, you will see a new menu item WP Activity Log in the left sidebar of your admin panel. You’ll be asked to enter your license key and click on the “Agree & Activate License” button to start using this plugin.

enter your license key to start using WP Activity Log plugin

Note: To get the license key, you can check the welcome email that you have received after purchasing the plugin.

Once activated, you will see new options under the WP Activity Log menu in the left sidebar.

To monitor the events on your website, you need to head over to the WP Activity Log » Log Viewer page.

WordPress activity log viewer to monitor events

This plugin also displays the latest events at the top bar of your screen. You can also click on those notifications to go to the Log Viewer page.

The log page will allow you to see all events on your website. You will get important details like the date of the event, the user involved, IP address of the user, and the event message.

For example, if someone logged into your site, then you will be able to find out who was that user, when did that person login, and the IP address of the user.

You can also control the events that you want to track by going to the WP Activity Log » Enable/Disable Events page.

Enable or Disable Events to monitor

Here you can select Basic, Geek, or Custom from the Log Level dropdown menu. Based on your selection, you will see different event names and their description on that page.

You can now enable or disable individual events by checking/unchecking the boxes. You can do the same by going to different tabs like Content & Comments, WordPress Install, Visitor Events, etc.

To track the logged in users on your site, you need to go to the WP Activity Log » Logged In Users page.

WP Activity Log Plugin logged in users

From here you will see all the users who are logged into your site. You can view all the activity of a certain user, or force someone to log out by clicking on the Terminate Session button.

If you want to download the activity log of your site, then simply go to the WP Activity Log » Reports page to generate a report based on the criteria that you may have.

That’s all! We hope this article helped you to understand how to monitor user activity in WordPress with the help of Simple History or WP Activity Log plugin.

You may also want to check out our ultimate WordPress security guide and our list of the best WordPress firewall plugins.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.

295 Shares
Share
Tweet
Share
Pin
Popular on WPBeginner Right Now!
  • How to Properly Move Your Blog from WordPress.com to WordPress.org

  • How to Start Your Own Podcast (Step by Step)

    How to Start Your Own Podcast (Step by Step)

  • Google Analytics in WordPress

    How to Install Google Analytics in WordPress for Beginners

  • How to Fix the Error Establishing a Database Connection in WordPress

    How to Fix the Error Establishing a Database Connection in WordPress

About the Editorial Staff

Editorial Staff at WPBeginner is a team of WordPress experts led by Syed Balkhi. Trusted by over 1.3 million readers worldwide.

The Ultimate WordPress Toolkit

14 Comments

Leave a Reply
  1. Lorenzo says:
    Jul 18, 2020 at 4:17 am

    Hi, very good article, thanks! I would need to know the activity of a user before the installation of a plugin, is it possible? Do you know a way to do it?

    Reply
    • WPBeginner Support says:
      Jul 22, 2020 at 1:31 pm

      We do not have a recommended way to do that at the moment.

      Reply
  2. Artem Russakovskii says:
    Sep 19, 2019 at 8:46 pm

    I’ve been using a paid version of this plugin for about a year now, and it’s proven invaluable several times already. Any small business and up with multiple authors should be using it.

    Reply
    • WPBeginner Support says:
      Sep 20, 2019 at 9:45 am

      Thanks for sharing your opinion of the plugin :)

      Reply
  3. Jorsana says:
    Sep 19, 2019 at 7:55 am

    Syed Balkhi and your team, I just have to say huge, huge Thank you.
    Your emails, FB answers, and advices are priceless.

    Reply
    • WPBeginner Support says:
      Sep 19, 2019 at 10:14 am

      Glad we could be helpful :)

      Reply
  4. Naomi says:
    Mar 11, 2019 at 2:44 pm

    I just put this on my website and in the last hour I see 56 events that say something like “Failed to login with username “[login]” (incorrect password entered)” Is this normal? Am I having some sort of hacker issues??

    Reply
    • WPBeginner Support says:
      Mar 12, 2019 at 10:28 am

      Your site may have had a brute force attack attempted on it. You can use plugins such as login lockdown from our article:
      https://www.wpbeginner.com/plugins/how-and-why-you-should-limit-login-attempts-in-your-wordpress/
      for a protective measure against this.

      Reply
      • Naomi says:
        Mar 12, 2019 at 10:45 am

        Thanks! I actually just found that site a few minutes ago. I’m going to install it now.

        Reply
        • WPBeginner Support says:
          Mar 12, 2019 at 10:53 am

          Glad our recommendation could help :)

  5. Marilyn says:
    Feb 6, 2014 at 7:35 pm

    I’m reading and putting in practice your article “How to Make an Internal Communication System in WordPress Using P2” and I just installed the Simple History plugin, but I noticed that this plugin’s last actualization was 8 months ago. Is it still safe to use it?

    Reply
    • WPBeginner Support says:
      Feb 6, 2014 at 9:39 pm

      Yes it is.

      Reply
      • Napstor says:
        Feb 8, 2016 at 5:47 am

        going to test

        Reply
  6. Purab Kharat says:
    Oct 9, 2013 at 5:14 pm

    very informative information given by you. We need to log the user activity and actions somewhere in wordpress. But unfortunatly we do not have best user management in wordpress like drupal.

    Reply

Leave a Reply Cancel reply

Thanks for choosing to leave a comment. Please keep in mind that all comments are moderated according to our comment policy, and your email address will NOT be published. Please Do NOT use keywords in the name field. Let's have a personal and meaningful conversation.

Over 1,320,000+ Readers

Get fresh content from WPBeginner

Featured WordPress Plugin
Smash Balloon
Smash Balloon
Add Custom Social Media Feeds in WordPress. Learn More »
How to Start a Blog How to Start a Blog
I need help with ...
Starting a
Blog
WordPress
Performance
WordPress
Security
WordPress
SEO
WordPress
Errors
Building an
Online Store
Useful WordPress Guides
    • 7 Best WordPress Backup Plugins Compared (Pros and Cons)
    • How to Fix the Error Establishing a Database Connection in WordPress
    • Why You Need a CDN for your WordPress Blog? [Infographic]
    • 30 Legit Ways to Make Money Online Blogging with WordPress
    • Self Hosted WordPress.org vs. Free WordPress.com [Infograph]
    • Free Recording: WordPress Workshop for Beginners
    • 24 Must Have WordPress Plugins for Business Websites
    • How to Properly Move Your Blog from WordPress.com to WordPress.org
    • 5 Best Contact Form Plugins for WordPress Compared
    • Which is the Best WordPress Popup Plugin? (Comparison)
    • Best WooCommerce Hosting in 2021 (Comparison)
    • How to Fix the Internal Server Error in WordPress
    • How to Install WordPress - Complete WordPress Installation Tutorial
    • Why You Should Start Building an Email List Right Away
    • How to Properly Move WordPress to a New Domain Without Losing SEO
    • How to Choose the Best WordPress Hosting for Your Website
    • How to Choose the Best Blogging Platform (Comparison)
    • WordPress Tutorials - 200+ Step by Step WordPress Tutorials
    • 5 Best WordPress Ecommerce Plugins Compared
    • 5 Best WordPress Membership Plugins (Compared)
    • 7 Best Email Marketing Services for Small Business (2021)
    • How to Choose the Best Domain Registrar (Compared)
    • The Truth About Shared WordPress Web Hosting
    • When Do You Really Need Managed WordPress Hosting?
    • 5 Best Drag and Drop WordPress Page Builders Compared
    • How to Switch from Blogger to WordPress without Losing Google Rankings
    • How to Properly Switch From Wix to WordPress (Step by Step)
    • How to Properly Move from Weebly to WordPress (Step by Step)
    • Do You Really Need a VPS? Best WordPress VPS Hosting Compared
    • How to Properly Move from Squarespace to WordPress
    • How to Register a Domain Name (+ tip to get it for FREE)
    • HostGator Review - An Honest Look at Speed & Uptime (2021)
    • SiteGround Reviews from 4464 Users & Our Experts (2021)
    • Bluehost Review from Real Users + Performance Stats (2021)
    • How Much Does It Really Cost to Build a WordPress Website?
    • How to Create an Email Newsletter the RIGHT WAY (Step by Step)
    • Free Business Name Generator (A.I Powered)
    • How to Create a Free Business Email Address in 5 Minutes (Step by Step)
    • How to Install Google Analytics in WordPress for Beginners
    • How to Move WordPress to a New Host or Server With No Downtime
    • Why is WordPress Free? What are the Costs? What is the Catch?
    • How to Make a Website in 2021 – Step by Step Guide
Deals & Coupons (view all)
LiveChat logo
LiveChat Inc Coupon
Get a 30 day free trial and 30% OFF LiveChat, one of the best live chat service providers for WordPress users.
LearnDash
LearnDash Coupon
Get the lowest price on the best learning management system (LMS) plugin for WordPress.
Featured In
About WPBeginner®

WPBeginner is a free WordPress resource site for Beginners. WPBeginner was founded in July 2009 by Syed Balkhi. The main goal of this site is to provide quality tips, tricks, hacks, and other WordPress resources that allows WordPress beginners to improve their site(s).

Join our team: We are Hiring!

Site Links
  • About Us
  • Contact Us
  • FTC Disclosure
  • Privacy Policy
  • Terms of Service
  • Free Blog Setup
  • Free Business Tools
  • Growth Fund
Our Sites
  • OptinMonster
  • MonsterInsights
  • WPForms
  • SeedProd
  • Nameboy
  • RafflePress
  • Smash Balloon
  • AIOSEO

Copyright © 2009 - 2021 WPBeginner LLC. All Rights Reserved. WPBeginner® is a registered trademark.

Managed by Awesome Motive | WordPress hosting by SiteGround | WordPress Security by Sucuri.