Activity log
See who did what in your panel, and when.
License required
The activity log needs the Audit Logs license feature. Without it the page is not in the menu.
Use the Activity Log to see each change, the person who made it, and the time. Navigate to Admin > Overview > Activity Log.
You also need the View Audit Logs permission.
The table
| Column | Description |
|---|---|
| Action | The action, with a coloured icon. Green marks a creation, blue an update, red a deletion, indigo a login, and grey a logout. |
| User | The username and the email address of the person. A panel-generated event shows System. |
| Resource | The affected resource, for example a server, a user, or a node. |
| IP Address | The address that the request came from. |
| Date | The date and time of the action. |
The table shows 50 rows per page. The footer shows the range, the total, and the page number, with arrows to move between pages.
When nothing matches, the page shows "No activity found."
Filtering
Click Filters to open the filter panel. It holds four controls:
| Filter | Description |
|---|---|
| Action | Limits the list to one action. |
| Resource Type | Limits the list to one resource type. |
| From Date | The earliest date to include. |
| To Date | The latest date to include. |
The search box above the filters narrows the list by free text. It matches the actor, the resource, and the description of the entry. Use it with the filters to find one entry quickly.
Export
Two buttons at the top right export the log:
- Export CSV - for a spreadsheet.
- Export JSON - for a script.
An export uses the filters that you applied. The file name holds the date, for example audit-logs-2026-08-02.csv.
Retention
The Activity Log page has no retention control. Set the retention at Admin > Settings > Advanced:
- Audit Log Retention (days) controls this page. The default is 90 days. The range is 7 to 365.
- Activity Log Retention (days) controls the per-server activity feed. The default is 90 days. The range is 7 to 365.
Per-Server activity
Each server has its own activity feed. A server owner or a subuser opens it from the Activity tab of the server.
The feed shows each action with an icon, a description, the username, the time, the IP address, and a category. A dropdown filters the feed. The options are All Actions, Power Actions, File Operations, Database, Schedules, Backups, Subusers, Startup, and Console. The feed shows 25 entries per page.
Recorded server actions include:
| Category | Actions |
|---|---|
| Power | Server Started, Server Stopped, Server Restarted, Server Killed, Server Reinstalled. |
| Files | File Uploaded, File Downloaded, File Deleted, File Modified, File Created, Directory Created, File Renamed. |
| Databases | Database Created, Database Deleted, Password Rotated. |
| Schedules | Schedule Created, Schedule Updated, Schedule Deleted. |
| Backups | Backup Created, Backup Restored, Backup Deleted. |
| Subusers | Subuser Added, Subuser Updated, Subuser Removed. |
| Settings | Allocation Changed, Startup Updated, Server Renamed. |
| Console | Command Executed. |
Personal history
The panel has no per-user activity page. A user can download a personal history from Account > Privacy & Data > Export My Data. That file holds 90 days of audit records and the login history.
Next steps
- User Management - manage accounts.
- Active Sessions - see who is signed in now.
- Advanced Settings - set the retention periods.