mobieusKnow Audit Log History #640
Author
Patrick Bass
Submitted
Sep 5, 2026 4:34am
Summary
Family meal sharing tickets: the conditions behind the share button and the Share with family? switch, reading a "logged but not shared" report back to a member, sharing a saved meal without logging it, and what to escalate

Audit Log

Every administrative and moderation action is recorded in the append-only audit log at /admin/audit.

What Gets Logged

  • User role changes (promotions, demotions)
  • User suspensions, bans, shadow bans
  • Content deletions (posts, threads, files)
  • Forum creation, modification, deletion
  • Configuration changes
  • Moderator assignments and removals
  • Feature flag toggles
  • Branding changes
  • Security actions (IP bans, MFA clears)

Log Fields

Each entry records:

  • Timestamp is when the action occurred
  • Actor is which admin or moderator performed it
  • Action is what was done (a structured action code like forum.settings_updated)
  • Detail is a human-readable description
  • IP address is the actor's IP at the time

Searching the Log

Filter by:

  • Action type
  • Actor (admin username)
  • Date range
  • Free-text search in details

Integrity

The audit log is append-only. Records cannot be updated or deleted. This ensures a tamper-evident trail of all administrative actions.

CSV Export

Export filtered results as CSV for external analysis or compliance reporting.

## Audit Log

Every administrative and moderation action is recorded in the append-only audit log at `/admin/audit`.

### What Gets Logged

- User role changes (promotions, demotions)
- User suspensions, bans, shadow bans
- Content deletions (posts, threads, files)
- Forum creation, modification, deletion
- Configuration changes
- Moderator assignments and removals
- Feature flag toggles
- Branding changes
- Security actions (IP bans, MFA clears)

### Log Fields

Each entry records:

- **Timestamp** is when the action occurred
- **Actor** is which admin or moderator performed it
- **Action** is what was done (a structured action code like `forum.settings_updated`)
- **Detail** is a human-readable description
- **IP address** is the actor's IP at the time

### Searching the Log

Filter by:
- Action type
- Actor (admin username)
- Date range
- Free-text search in details

### Integrity

The audit log is **append-only**. Records cannot be updated or deleted. This ensures a tamper-evident trail of all administrative actions.

### CSV Export

Export filtered results as CSV for external analysis or compliance reporting.