Event Detail and Context

Every event recorded by Chada Activity Monitor carries a rich JSON context object that captures exactly what changed. The Event Detail Panel presents this in a structured, readable format without requiring you to leave the Activity Log screen.

Opening the panel

Click any row in the Activity Log to slide the panel in from the right. The panel fetches the full event record via an AJAX request and displays it immediately. Click anywhere outside the panel or press Escape to close it.

Panel sections

Header

Shows the event code (for example content.post_updated), the severity badge, and the exact timestamp (date, time, and timezone).

Actor

• User — display name and username (user_login), linked to the user’s profile.
• Role — the user’s primary role at the time of the event (user_role).
• IP address — the request IP (ip). Shown as x.x.x.xxx if Anonymize IP is enabled.
• User agent — the browser or client string (user_agent), useful for spotting scripted actions.

Object

• Type — what kind of thing was acted on (object_type): post, term, attachment, comment, plugin, theme, option, user, menu.
• ID — the numeric WordPress ID of the object (object_id), if applicable.
• Name — the human-readable name of the object (object_name), for example a post title or plugin name.

Message

The plain-language description of what happened, identical to what appears in the Description column of the log list.

Context

The context section shows the raw context JSON field rendered as a human-readable diff for content changes. For a post update, for example, you will see a table of changed fields with the old value on the left and the new value on the right:

{
  "old": {
    "post_status": "draft",
    "post_title": "My First Post"
  },
  "new": {
    "post_status": "publish",
    "post_title": "Hello World"
  }
}

For authentication events the context includes the login method and, on failures, the error code. For plugin events it includes the plugin file path and version numbers. The exact fields vary by event type.

CSV export

The Export CSV button at the top of the Activity Log screen exports events to a downloadable CSV file. The export respects the current filter state — if you have filtered to Critical severity events in the last 7 days, only those events are exported. To export the full log, clear all filters first.

Each exported row contains: id, created_at, user_login, user_role, ip, event_code, event_group, severity, object_type, object_id, object_name, message. The full context JSON is included as the last column.

Pinned events (premium)

With an active premium license, a star icon appears on the right side of every event row. Click the star to pin that event — pinned events float to the top of the log regardless of the current sort order and display a distinct filled-star indicator. Pinning is useful for flagging events you want to return to for investigation without losing them to pagination.

To view only pinned events, use the Pinned filter toggle at the top of the log.