Admin Audit Trail

This module track logs of specific events that you'd like to review. The events performed by the users (using the forms) are saved in the database and can be viewed on the page admin/reports/audit-trail. You could use this to track the number of times the CUD (Create, Update & Delete) operations are performed by specific users. It gives site owners, project managers and compliance teams a clear answer to: who did what, when, and from where.

Currently, the following sub modules of Admin Audit Trail are supported:

Admin Audit Trail User Authentication

Logs user authentication (login logout and request password).

Admin Audit Trail Block Content

Logs block content CUD events performed by the user.

Admin Audit Trail Comment

Logs comment CUD events performed by the user.

Admin Audit Trail Config

Logs configuration CUD events (site settings, content types, fields, views, and other configuration).

Admin Audit Trail Entityqueue

Logs entityqueue CUD events performed by the user.

Admin Audit Trail File

Logs file CUD events performed by the user.

Admin Audit Trail Group

Logs group CUD events performed by the group.

Admin Audit Trail Logger

Forwards every audit event to the Drupal logger (syslog, Monolog, dblog) for SIEM and log-aggregation pipelines, in hybrid or PSR-3 only mode, with a configurable channel and per-operation severities.

Admin Audit Trail Media

Logs media CUD events performed by the user.

Admin Audit Trail Menu

Logs menu CUD events performed by the user.

Admin Audit Trail Node

Logs node CUD events performed by the user.

Admin Audit Trail OpenID Connect

Logs Active Directory (Windows Azure AD / Entra ID) logins made through OpenID Connect.

Admin Audit Trail Paragraph

Logs paragraph CUD events performed by the user.

Admin Audit Trail Redirect

Logs redirect CUD events performed by the user.

Admin Audit Trail Taxonomy

Logs taxonomy vocabulary and term CUD events performed by the user.

Admin Audit Trail User

Logs user CUD events performed by the user.

Admin Audit Trail User Roles

Logs user role assignment and removal events.

Admin Audit Trail Workflows

Logs content moderation (workflow) state changes on all moderated entity types (nodes, media, custom blocks, and more).

The event log tracking could be easily extended with custom events. Events triggered from the command line (Drush) can also be recorded when the "Log CLI events" setting is enabled, flagged in the report.

Compatible with Drupal 10.1+, 11 and 12. Covered by automated unit, kernel and end-to-end functional tests.

Other helper modules:

• Audit Trail Purge by Sushil Kanyan

This module is sponsored by Vardot.