mobieusKnow Audit Log History #51
Author
Patrick Bass
Submitted
May 26, 2026 10:36pm
Reviewed
May 26, 2026 10:36pm
Summary
Initial version
## Audit Log
Every administrative and moderation action is recorded in the append-only audit log at `/admin/audit`.
### What Gets Logged
- User role changes (promotions, demotions)
- User suspensions, bans, shadow bans
- Content deletions (posts, threads, files)
- Forum creation, modification, deletion
- Configuration changes
- Moderator assignments and removals
- Feature flag toggles
- Branding changes
- Security actions (IP bans, MFA clears)
### Log Fields
Each entry records:
+ - **Timestamp** — when the action occurred
+ - **Actor** — which admin/moderator performed it
+ - **Action** — what was done (structured action code like `forum.settings_updated`)
+ - **Detail** — human-readable description
+ - **IP address** — the actor's IP at the time
- **Timestamp** is when the action occurred
- **Actor** is which admin or moderator performed it
- **Action** is what was done (a structured action code like `forum.settings_updated`)
- **Detail** is a human-readable description
- **IP address** is the actor's IP at the time
### Searching the Log
Filter by:
- Action type
- Actor (admin username)
- Date range
- Free-text search in details
### Integrity
The audit log is **append-only**. Records cannot be updated or deleted. This ensures a tamper-evident trail of all administrative actions.
### CSV Export
Export filtered results as CSV for external analysis or compliance reporting.

Audit Log

Every administrative and moderation action is recorded in the append-only audit log at /admin/audit.

What Gets Logged

  • User role changes (promotions, demotions)
  • User suspensions, bans, shadow bans
  • Content deletions (posts, threads, files)
  • Forum creation, modification, deletion
  • Configuration changes
  • Moderator assignments and removals
  • Feature flag toggles
  • Branding changes
  • Security actions (IP bans, MFA clears)

Log Fields

Each entry records:

  • Timestamp — when the action occurred
  • Actor — which admin/moderator performed it
  • Action — what was done (structured action code like forum.settings_updated)
  • Detail — human-readable description
  • IP address — the actor's IP at the time

Searching the Log

Filter by:

  • Action type
  • Actor (admin username)
  • Date range
  • Free-text search in details

Integrity

The audit log is append-only. Records cannot be updated or deleted. This ensures a tamper-evident trail of all administrative actions.

CSV Export

Export filtered results as CSV for external analysis or compliance reporting.

## Audit Log

Every administrative and moderation action is recorded in the append-only audit log at `/admin/audit`.

### What Gets Logged

- User role changes (promotions, demotions)
- User suspensions, bans, shadow bans
- Content deletions (posts, threads, files)
- Forum creation, modification, deletion
- Configuration changes
- Moderator assignments and removals
- Feature flag toggles
- Branding changes
- Security actions (IP bans, MFA clears)

### Log Fields

Each entry records:

- **Timestamp** — when the action occurred
- **Actor** — which admin/moderator performed it
- **Action** — what was done (structured action code like `forum.settings_updated`)
- **Detail** — human-readable description
- **IP address** — the actor's IP at the time

### Searching the Log

Filter by:
- Action type
- Actor (admin username)
- Date range
- Free-text search in details

### Integrity

The audit log is **append-only**. Records cannot be updated or deleted. This ensures a tamper-evident trail of all administrative actions.

### CSV Export

Export filtered results as CSV for external analysis or compliance reporting.