Audit Log
The Audit Log panel in the VIP Dashboard provides visibility into what is happening in an organization or application. An audit trail of all management actions on the platform allows compliance with internal and external regulatory standards, and provides insight for debugging, security, and incident investigation.
Audit Logs are immutable and the reported data is retained for the lifetime of each customer.
Application view
All management actions that occur specific to that application are reported in the application’s Audit Log.
Prerequisite
To access the Application view of the Audit Log panel, a user must have at minimum an Org member role or an App admin role for that application.
Organization view
All management actions that occur on all applications belonging to the organization are reported in the organization’s Audit Log.
Prerequisite
To access the Organization view of the Audit Log panel, a user must have at minimum an Org member role.
Structure of logged events
All recorded events display the following information:
| Date & Time | When the event happened. Dates & times are shown in the local timezone of the person who is viewing the audit log screen. Hover over the time to see time in UTC. | Example: 12:20pm |
| Actor | The user who performed the event. This will be a user within the organization, a VIP Support user (denoted by a “(VIP)” after their name), or an automation bot (Platform Bot). | Example: John Newton |
| Description | A sentence describing the event. | Example: Added domain mytestdomain.com |
| Target | What was affected by the event. An environment, a user, or the organization. | Example: mytestsite/production |
Additional relevant contextual information may be shown for some events.
Event permalinks
Each logged event has a unique and shareable permalink URL linked in the event’s timestamp. When the event’s permalink is selected, the Audit Log is filtered to display that event at the top of the list, and all prior events listed below it.
Types of logged events
| Application and environment lifecycle | Application created |
| Application retired | |
| Environment created | |
| Environment retired | |
| Environment launched | |
| A network site launch started on a WordPress multisite environment | |
| A network site launch completed on a WordPress multisite environment | |
| Backups | A database backup was requested |
| A database backup started | |
| Basic Authentication | Basic Authentication has been enabled |
| Basic Authentication has been disabled | |
| A Basic Authentication username/password combination has been added | |
| A Basic Authentication username/password combination has been removed | |
| A Basic Authentication username/password combination has been updated | |
| Data sync | A data sync was queued |
| Domains | A domain is added |
| A domain is deleted | |
| A domain is set as primary | |
| A domain is updated | |
| Enterprise Authentication | A user creates an invitation |
| A user resends an invitation | |
| A user accepts an invitation | |
| A user cancels an invitation | |
| A user’s role is added | |
| A user’s role is updated | |
| A user’s role is removed | |
| Environment variables | An environment variable was added |
| An environment variable was updated | |
| An environment variable was deleted | |
| GitHub repository | GitHub webhook is configured |
| The associated GitHub repository or branch was updated | |
| GitHub deploy key added | |
| GitHub deploy key updated | |
| GitHub deploy key deleted | |
| Imports | A SQL import was requested |
| A media import was requested | |
| A media import was aborted | |
| IP Allow list | IP Allow list functionality has been enabled |
| IP Allow list functionality has been disabled | |
| An IP or CIDR range has been added | |
| An IP or CIDR range has been removed | |
| The list of IPs and CIDR ranges has been updated | |
| HTTP request Log Shipping | A log shipping configuration has been created |
| A log shipping configuration has been updated | |
| A log shipping configuration has been deleted | |
| A log shipping configuration has been enabled | |
| A log shipping configuration has been disabled | |
| Media Backups | A media backup was requested |
| A media backup was started | |
| New Relic | A New Relic license key was added |
| A New Relic license key was updated | |
| A New Relic license key was removed | |
| Purge the page cache | One or more URLs were purged from the page cache |
| Software Management | A software update was started |
| TLS/SSL certificates | Let’s Encrypt certificates are enabled on a domain |
| Let’s Encrypt certificates are disabled on a domain | |
| Let’s Encrypt configuration is changed | |
| A certificate was added | |
| A certificate was activated for a domain | |
| A certificate was deactivated for a domain | |
| A certificate was updated | |
| A certificate was deleted | |
| VIP Support user | A VIP Support user was created on the WordPress environment |
| WP-CLI commands | A WP-CLI command has been run using the VIP-CLI |