Once you install the extension in your store, you can keep track of all admin activities: changes and login attempts. All these details help you to maintain a safer environment and always be aware of what is being changed in your store.
In this guide though, you'll learn how to configure and manage the extension.
To configure the Magento 2 Admin Action Log, navigate to Stores > Configuration > Magefan Extensions and find a corresponding extension. Then enable it.
General Settings
Before you start tracking admin user actions and logins, configure what and how to track in the Configuration section.
Admin Activity Log
Admin action logs track every action admin users take on your store: view, edit, delete. Enable action log and define the following:
- Lifetime (in days) — specifies for how long to store the admin action log. The default value is 90 days, but you can change that to save resources.
- Log Modules — defines the sections of the admin panel you want to track. Choose all or specific areas.
- Enable Multiuser Edit Notifications — enables notifications for admins in case they're trying to enter an entity that another admin user has already viewed or edited. It prevents admins from overriding each other's changes.
- Recent Activity Threshold — defines the time period to use for tracking recent changes of specific pages and notifying other admin users about those changes. Choose lower number for the most recent changes and a higher number to track longer periods.
e.g. if admin user A visited a product page and edited the description. After 10 minutes, admin user B visits the same page to edit something. He (user B) is than notified that the admin user A has already edited this product page.
Login Log
If you want to receive notices about the last admin's login time and IP, enable the Login Log.
- Lifetime (in days) — specifies for how long to store the admin login log.
- Show Last Login Notice — displays the notification about the last admin user login in the admin panel, after login.
Additional Settings
This section allows you to choose whether to Hide IP Addresses in Logs (both Activity and Login log).
Activity Log Panel
Navigate to System > Admin Activity Log > Activity Log to view all admin activity and view what changes were made. The extension tracks the view, create, edit and delete events.
Login Log Panel
To view who tried to log in to your admin panel, go to System > Admin Activity Log > Login Log. There you can find all login attempts sorted by success, failed and logout along with the IP address and country the attempt is made from.
Geo IP Databases
The Admin Action Log Extension uses 3 different databases for proper Geo IP detection. Magefan Geo IP Database is used by default. But you can also use Cloudflare and Maxmind.
Additionally, you use the Geolocation Simulator the extension comes with and tests how the location is detected. Simply specify your IP(s) in the Allowed IPs field and set a Country it should Simulate.
Access Control List
Finally, you can configure the users' roles to restrict their access to the admin activity and login logs. Thus, you, as the main admin, will be able to view all changes made by the admin users.
By enabling the admin activity tracking you ensure that no changes go unnoticed. However, note that it's not the only thing you need to do. We recommend checking out Magento admin security options as well.
