WordPress Access and Activity Logs in Sparkforge
Sparkforge WordPress hosting includes activity logs (user actions), access logs (server requests), and audit logs (account-level events) for security and troubleshooting.
Sparkforge WordPress hosting includes three log types so you can track what's happening on your site. Each one answers a different question.
Activity Logs
Track user actions inside the WordPress admin.
- What's logged: who took the action, when, and whether it succeeded or errored
- Use case: investigating config changes or unexpected user behavior
How to enable Activity Logs
- Open WordPress Dashboard > Manage Site.
- Select Activity Logs from the submenu.
- Enable logging and pick a time range. Logs populate as new activity happens.
Access Logs
Server-level request logs.
- What's logged: requested URL, client IP, timestamp, HTTP status code, response size
- Use case: traffic analysis, spotting unusual patterns, performance optimization
How to view Access Logs
- Go to WordPress Dashboard > Manage Site.
- Open Analytics > Visitors Report.
- Scroll to the bottom and view Access Logs.
Audit Logs
Account-level events tied into the broader Sparkforge audit trail.
- What's logged: WordPress purchases, unsubscribes, site creation, site deletion
- Use case: accountability for high-impact actions across your account
How to view Audit Logs
- Open Subaccount Settings from the sidebar.
- Scroll to the bottom and select Audit Logs.
Troubleshooting
- No logs showing: verify your user has the permission to view logs
- Suspicious access pattern: rotate passwords, review who has admin access, audit recent installations
- High error rates: use logs to identify failing plugins or misconfigured rewrites
Frequently Asked Questions
Which log do I check for who deleted a page?
Activity Logs. They show user actions taken inside the WordPress admin, including who did what and when.
Where do I look to debug a 500 error?
Access Logs. The HTTP status code column shows which URLs are returning errors.
Can I export logs?
Logs are viewable in the dashboard. For longer retention or external SIEM ingestion, contact support to discuss export options.
How do I spot suspicious activity?
Cross-reference Access Logs (high request counts from one IP, repeated 401/403 responses) with Activity Logs (account changes you didn't make).
Do logs slow down the site?
No. Logging runs at the server and platform level, not in the request path.
Was this article helpful?
Thanks for the feedback.