內容簡介
TraceVault Audit Log 為管理員提供清晰且可搜尋的 WordPress 活動審計記錄。它記錄用戶、內容、媒體、評論、外掛、佈景主題及設置等事件，方便管理員檢視和追蹤重要活動。
【主要功能】
• 自訂資料庫表格以儲存審計記錄
• 批次寫入日誌以減少運行開銷
• 可搜尋的事件類型、用戶及時間篩選器
• 活動日誌螢幕具可讀事件標籤
• TraceVault Storylines 重建相關事件
• 支援 REST API 端點以進行日誌匯出
外掛標籤
開發者團隊
原文外掛簡介
TraceVault Audit Log gives administrators a clear, searchable audit trail for important WordPress activity. It records user, content, media, comment, plugin, theme, settings, and optional WooCommerce events into optimized custom tables, then makes that activity easy to review from wp-admin.
Use it to investigate account activity, track content changes, review system-level events, export filtered reports, and control how long audit data stays on the site.
Key Features
Custom database tables for audit logs, searchable metadata, storyline incidents, and settings.
Batched log writes to reduce runtime overhead.
Indexed filters for event type, severity, user, role, IP address, object, date, and keyword search.
Activity Logs screen with readable event labels, quick filters, CSV/JSON exports, and clear controls.
Configurable admin date display, including WordPress format, relative time, and fixed timestamp formats.
TraceVault Storylines reconstructs related events into explainable security incidents.
Deterministic local risk scoring with the exact reasons each incident was flagged.
Privacy-safe request and session correlation without storing authentication cookies or raw session tokens.
Incident review notes, open/reviewed/resolved workflow, and forensic JSON exports.
REST API endpoints for logs, stats, and exports.
Retention controls, IP anonymization, personal data export, and personal data erasure support.
Multisite activation support.
Developer hooks and filters for custom event types.
Quiet defaults: verbose option-update logging is disabled unless enabled, and noisy cache-style options are ignored.
TraceVault Storylines
Storylines connects related audit records by actor, privacy-safe session fingerprint, username, IP address, and time window. Instead of leaving administrators to interpret isolated rows, it reconstructs a chronological security story and explains its risk score.
Built-in local rules detect repeated failed logins, successful logins following repeated failures, administrator role escalation, privileged system changes after an escalation, bursts of system changes, high-impact activity from a new session, and sensitive WordPress setting changes. No AI service or external detection API is used.
Administrators can investigate the full timeline, record an analyst note, mark incidents reviewed or resolved, and export a forensic JSON report. Storyline sensitivity and correlation window are configurable in settings.
Logged Activity
TraceVault Audit Log can record:
Users: login, logout, failed login attempts, profile updates, password changes, role changes, user creation, and deletion.
Content: post and page creation, updates, deletion, media upload/deletion, comment creation, comment status changes, and comment deletion.
System: plugin activation/deactivation/deletion, plugin and theme install/update completion, theme switch, and selected settings changes.
WooCommerce: order create/update/status change, product create/update, and coupon create/update when WooCommerce is active.
Privacy and Retention
Audit logs can contain operationally sensitive data. TraceVault Audit Log keeps the controls local to your WordPress install:
No external logging service is required.
Retention defaults to 90 days and can be changed from settings.
IP anonymization can be enabled before storage.
Personal data exporter and eraser callbacks are registered for WordPress privacy tools.
Data deletion on uninstall is opt-in so audit history is not removed accidentally.
Developer Friendly
Developers can create custom events with tracevault_log_event() and extend behavior with filters such as tracevault_allowed_events and tracevault_log_data_before_insert.
Storyline scoring can be extended with tracevault_storyline_evaluation, and integrations can listen for created or extended incidents with tracevault_storyline_updated.
