Jaroslav Svetlik

Bat Activity Log helps site owners and administrators understand what changed, who changed it, and when it happened.
The plugin records activity across users, content, media, comments, plugins, themes, settings, updates, privacy workflows, and other core WordPress operations. Logs are stored in a custom indexed table for fast filtering and large datasets.
<h4>Key features</h4>
<ul>
<li>Track logins, logouts, failed logins, profile changes, registrations, role changes, and password updates.</li>
<li>Record post, page, media, comment, taxonomy, menu, widget, and settings activity.</li>
<li>Monitor plugin, theme, and WordPress update activity.</li>
<li>Filter logs by event type, action, severity, user, object, IP address, and date range.</li>
<li>Use saved views, quick filters, bulk actions, CSV export, and a structured log detail drawer.</li>
<li>Configure retention cleanup, privacy controls, alert rules, and scheduled reports.</li>
<li>Verify log integrity with a tamper-evident hash chain.</li>
<li>Use WP-CLI commands for stats, cleanup, export, repair, reporting, benchmarking, and integrity verification.</li>
</ul>
<h4>Event coverage</h4>
Bat Activity Log currently covers:
<ul>
<li>User authentication and account events</li>
<li>Content and revision events</li>
<li>Media library activity</li>
<li>Comment activity</li>
<li>Plugin and theme lifecycle events</li>
<li>Core, update, and database upgrade events</li>
<li>Settings, widget, permalink, and menu changes</li>
<li>Privacy request and erasure workflow events</li>
<li>File editor changes</li>
<li>WooCommerce events when WooCommerce is active</li>
<li>Supported form submission events for Contact Form 7, Gravity Forms, WPForms, and Elementor Pro Forms</li>
</ul>
<h4>Integrity and privacy</h4>
Each log row includes integrity metadata that can be verified from the Tools screen or WP-CLI. Privacy controls include IP logging toggles, optional IP anonymization, user-agent logging controls, and WordPress personal data exporter and eraser integration.
<h4>WP-CLI examples</h4>
<ul>
<li><code>wp bat-activity-log stats</code></li>
<li><code>wp bat-activity-log cleanup --days=90 --batch-size=2000</code></li>
<li><code>wp bat-activity-log export --file=/tmp/activity-log.csv</code></li>
<li><code>wp bat-activity-log repair</code></li>
<li><code>wp bat-activity-log verify-integrity</code></li>
<li><code>wp bat-activity-log report --days=7 --format=text</code></li>
<li><code>wp bat-activity-log benchmark --iterations=10 --per-page=100</code></li>
</ul>

Bat Activity Log

Track important WordPress activity with detailed audit logs, filters, alerts, reports, and integrity checks.

inkamedia

InkaTrace for Activity & Audit Log is a practical and lightweight WordPress activity monitoring plugin built for administrators, site managers, developers, agencies, schools, organizations, and businesses that need clear visibility into what is happening inside a WordPress site.
Whether you need a simple activity log for daily monitoring or a more structured audit trail for security review, content oversight, and operational accountability, InkaTrace helps you monitor important user actions, login activity, and system-related changes from one centralized admin interface.
InkaTrace is designed to provide a focused audit workflow without unnecessary complexity. The free edition covers essential monitoring and investigation needs, while the Pro edition expands the workflow with deeper compliance, reporting, export, and retention capabilities.
Free Activity Log Features
<ul>
<li>
Activity Log Table 
Review WordPress activity in a centralized log table with filters, search, and saved presets for faster daily review.
</li>
<li>
Incident Notes 
Add internal notes and basic incident status directly inside log detail so your team can keep investigation context in one place.
</li>
<li>
Dashboard Activity Widget 
Monitor recent site activity directly from the WordPress dashboard.
</li>
<li>
Failed Login Monitoring 
Track failed login attempts with warning and security-focused severity labels for faster awareness of suspicious patterns.
</li>
<li>
Optional Auto-Purge Controls 
Set log retention preferences to help keep the activity database manageable over time.
</li>
<li>
Optional IP Geolocation Consent 
Enrich public IP information from the admin area only when explicit consent is enabled.
</li>
<li>
Simple Access Control 
Administrators always have access, with an optional editor-view setting for teams that need limited visibility.
</li>
<li>
Lightweight Admin Workflow 
Use a focused interface built for practical audit review without overloading the dashboard.
</li>
</ul>
Pro Edition Expands the Workflow With
<ul>
<li>Compliance reports for summary-based audit review.</li>
<li>Forensic timeline for deeper investigation by date, user, IP, and event flow.</li>
<li>Extended retention, archive, and restore workflow for long-term audit history.</li>
<li>More advanced export and investigation workflow for teams that need deeper review.</li>
</ul>
Why Choose InkaTrace?
<ul>
<li>Focused and practical for day-to-day WordPress monitoring.</li>
<li>Security-aware workflow for suspicious login and activity review.</li>
<li>Designed for real admin use with filtering, notes, and investigation support.</li>
<li>Flexible enough to start lightweight and grow into deeper audit workflow with Pro.</li>
</ul>
Perfect For
<ul>
<li>Site administrators who need visibility into user and system activity.</li>
<li>Agencies managing client WordPress sites.</li>
<li>Schools and organizations that need accountability logs.</li>
<li>Businesses that want a simple audit trail for WordPress operations.</li>
<li>Teams that need login monitoring and investigation notes without an overly complex system.</li>
</ul>
<h3>Privacy</h3>
This plugin stores activity log records locally in your WordPress database.
For security auditing purposes, log entries can include: 
* User account information related to the action. 
* IP addresses. 
* User agent / device strings. 
* Log content describing the recorded action.
<h3>External Services</h3>
This plugin can call external IP geolocation services when an administrator enables IP geolocation consent in Settings and then opens IP details in the Activity Log.
Services used: 
* <code>https://ipapi.co/</code> 
* <code>https://ipwho.is/</code>
Data sent: 
* The visitor IP address stored in the activity log.
Purpose: 
* To display geographic/network context for audit and security investigation.
These requests are optional, only triggered from the admin UI, and never run on front-end page loads.
This plugin also includes an optional support contact form in the admin settings page.
Data sent when an administrator uses the support form: 
* The message subject entered by the user. 
* The message body entered by the user. 
* The optional email address entered by the user. 
* The site URL. 
* The installed plugin version.
Recipient: 
* <code>pt.inkamediautama@gmail.com</code>
Purpose: 
* To receive support requests, bug reports, feature requests, and product feedback initiated by the site administrator.
This request is only sent when the administrator manually submits the support form.

InkaTrace for Activity & Audit Log

Audit and monitor key WordPress activities across users, content, login activity, and system events in one admin log.

Bat Activity Log vs InkaTrace for Activity & Audit Log