Configuring Settings
All plugin configuration lives under Activity Log → Settings. The settings are stored in a single WordPress option named cam_settings. Changes take effect immediately — no cache flush or restart required.
General tab
Event groups
A row of checkboxes controls which of the nine event groups are recorded. Unchecking a group stops all new events in that group from being saved — existing events are unaffected. All nine groups are enabled by default.
| Group | What it records when enabled |
|---|---|
| auth | Logins, logouts, failed logins, password resets, application password usage. |
| content | Post, page, and CPT lifecycle: created, updated, status-changed, trashed, restored, deleted. |
| taxonomy | Term created, updated, or deleted for any registered taxonomy. |
| media | Attachments uploaded, edited (title/alt/caption), or deleted. |
| comments | Comment submitted, approved, unapproved, spammed, trashed, or deleted. |
| plugins | Plugin activated, deactivated, installed, updated, or deleted. |
| themes | Theme switched, Customizer saved, theme deleted. |
| core | WordPress core updated, key options changed, users created/updated/deleted. |
| menus | Navigation menus created, updated, assigned to locations, or deleted. |
Retention days
The Retention days field controls how many days of events to keep. The daily cron job (cam_daily_cleanup) deletes events older than this threshold.
- Default: 90 days.
- Setting this to 0 disables automatic pruning — events are kept forever. This is a premium-only option; on Lite the field enforces a minimum of 1.
- If Log Archiving is enabled (premium), expiring events are exported to a gzipped CSV before being deleted.
Access tab
View roles
By default only administrators can view the Activity Log. The View roles multi-select lets you extend access to additional roles (Editor, Author, Contributor, Subscriber, or any custom role). Members of a selected role are granted the virtual capability cam_view_log.
Administrators always have cam_view_log regardless of this setting. The capability can also be assigned directly via a role-management plugin if you need user-level rather than role-level control.
Privacy tab
Anonymize IP
When enabled, the last octet of every IPv4 address is replaced with xxx (e.g., 198.51.100.xxx) before the event is stored. IPv6 addresses are truncated to the first 80 bits. This supports GDPR Article 25 (data protection by design) — once anonymised, the original IP is not recoverable.
Anonymization applies to new events only; existing events in the database are not retroactively altered.
Email on Critical
When enabled, the plugin sends an email to the WordPress admin_email address whenever a Critical-severity event is recorded. The email includes the event message, the actor, the timestamp, and a link to the full event in the Activity Log.