Audit Log event types
The types of events that are recorded in Audit Logs for an organization or an application.
| Feature | Recorded event type |
|---|---|
| Application and environment lifecycle | Application created |
| Application retired | |
| Environment created | |
| Environment retired | |
| Environment launched | |
| A network site launch started on a WordPress multisite environment | |
| A network site launch completed on a WordPress multisite environment | |
| Basic Authentication | Basic Authentication was enabled |
| Basic Authentication was disabled | |
| A Basic Authentication username/password combination has been added | |
| A Basic Authentication username/password combination has been removed | |
| A Basic Authentication username/password combination has been updated | |
| Code Deployment | Custom Deployment was enabled |
| Default Deployment was enabled | |
| The repository branch deploying to an environment was updated | |
| A deployment finished | |
| A deployment failed | |
| Codebase: Plugins | A user initiated a pull request to update a plugin |
| Data sync | A data sync was queued |
| Database Backups | A database backup was requested |
| A database backup for a network site was requested | |
| A database backup was downloaded | |
| A database backup was started | |
| Domains | A domain was added |
| A domain was deleted | |
| A domain was set as primary | |
| A domain was updated | |
| A domain was verified | |
| Environment variables | An environment variable was added |
| An environment variable was updated | |
| An environment variable was deleted | |
| GitHub repository | GitHub webhook is configured |
| The associated GitHub repository or branch was updated | |
| GitHub deploy key added | |
| GitHub deploy key updated | |
| GitHub deploy key deleted | |
| HSTS | HSTS settings have been updated |
| Integrations | A configuration for an Integration was updated |
| HTTP request Log Shipping | A log shipping configuration was created |
| A log shipping configuration was updated | |
| A log shipping configuration was deleted | |
| A log shipping configuration was enabled | |
| A log shipping configuration was disabled | |
| Imports | A SQL import was requested |
| A media import was requested | |
| A media import was aborted | |
| IP Restrictions | Enabled the IP Allow List |
| Updated the IP Allow List | |
| Deleted the IP Allow List | |
| Enabled the IP Deny List | |
| Updated the IP Deny List | |
| Deleted the IP Deny List | |
| Media Backups | A media backup was started |
| A media backup for a network site was started | |
| A media backup was downloaded | |
| New Relic | New Relic enabled |
| New Relic disabled | |
| New user given access to New Relic | |
| Access to New Relic removed for a user | |
| Notifications | Created a Notifications recipient |
| Updated a Notifications Recipient | |
| Deleted a Notifications Recipient | |
| Personal Access Token | Personal Access Token expired due to inactivity |
| phpMyAdmin | A phpMyAdmin session was started |
| Purge the page cache | One or more URLs were purged from the page cache |
| Single Sign-On for the VIP Dashboard | An identity provider (IdP) configuration was created |
| An identity provider (IdP) configuration was updated | |
| Assertion encryption was enabled on an identity provider (IdP) configuration | |
| Assertion encryption was disabled on an identity provider (IdP) configuration | |
| Email domains for Single Sign-On were updated | |
| Enforce SSO for an organization was enabled | |
| Enforce SSO for an organization was disabled | |
| Software Versions | A software update was started |
| TLS/SSL certificates | Let’s Encrypt certificates were enabled on a domain |
| Let’s Encrypt certificates were disabled on a domain | |
| Let’s Encrypt configuration was changed | |
| A certificate was added | |
| A certificate was activated for a domain | |
| A certificate was deactivated for a domain | |
| A certificate was updated | |
| A certificate was deleted | |
| User Agent Restrictions | Enabled User Agent Deny List |
| Updated User agent Deny List | |
| Deleted User Agent Deny List | |
| VIP Dashboard access | A user created an invitation |
| A user resent an invitation | |
| A user accepted an invitation | |
| A user canceled an invitation | |
| A user’s role was added | |
| A user’s role was updated | |
| A user’s role was removed | |
| VIP Support user | A VIP Support user was created on the WordPress environment |
| WP-CLI commands | A WP-CLI command was run using VIP-CLI |
Last updated: June 26, 2025