Privacy and Reference
Logify Event Reference — Every Event Logify Records
What is it?
A complete list of the events Logify records, with the event ID and action stored against each one. Use it to work out what a log entry means, to build a filter or alert rule, or to pick a free ID when adding your own event.
Events marked PRO require Logify PRO.
How IDs are organised
Every category owns a block of one thousand IDs. Keeping to the blocks is what makes it possible to filter, report, and alert on a category without listing every event.
| Range | Category |
|---|---|
| 1000–1999 | Users and security |
| 2000–2999 | Media |
| 3000–3999 | Comments |
| 4000–4999 | Plugins |
| 5000–5999 | Themes |
| 6000–6999 | Posts and pages |
| 7000–7999 | Taxonomy terms |
| 8000–8999 | Navigation menus |
| 9000–9999 | Widgets |
| 10000–10999 | WordPress settings |
| 11000–11999 | Advanced Custom Fields PRO |
| 12000–12999 | bbPress PRO |
| 13000–13999 | WooCommerce PRO |
| 14000–14999 | URL Shortify PRO |
| 15000–15999 | Gravity Forms PRO |
A new category should start at 16000.
Users and security
| ID | Event type | Action | What it means |
|---|---|---|---|
| 1000 | user | login |
A user signed in |
| 1001 | user | logout |
A user signed out |
| 1002 | user | registered |
A new user account was created |
| 1003 | user | delete |
A user account was deleted |
| 1004 | security | login_failed |
A sign-in attempt failed |
| 1005 | user | updated |
A profile was updated |
| 1006 | user | password_reset |
A password was reset |
| 1008 | user | role_changed |
A user's role changed |
| 1009 | security | brute force | Repeated failed logins from one IP within the detection window |
| 1010 | user | session_terminated |
An administrator forced a session to log out PRO |
Login entries also record the method used, so a sign-in through Magic Link or a Temporary Login link is labelled as such. See Magic Link Tagging and Temporary Login Tagging.
Media
| ID | Action | What it means |
|---|---|---|
| 2000 | added |
A file was uploaded |
| 2001 | updated |
An attachment was edited |
| 2002 | deleted |
An attachment was deleted |
Comments
| ID | Action |
|---|---|
| 3000 | created |
| 3001 | updated |
| 3002 | deleted |
| 3003 | spammed |
| 3004 | unspammed |
| 3005 | trashed |
| 3006 | untrashed |
| 3007 | status_changed |
Plugins
| ID | Action | What it means |
|---|---|---|
| 4000 | activated |
A plugin was activated |
| 4001 | deactivated |
A plugin was deactivated |
| 4002 | installed_updated |
A plugin was installed or updated through the updater |
| 4003 | deleted |
A plugin was deleted |
| 4004 | installed |
A plugin was installed |
| 4005 | file_edited |
A plugin file was edited in the built-in editor |
| 4006 | updated |
A plugin was updated |
Themes
| ID | Action | What it means |
|---|---|---|
| 5000 | activated |
A theme was activated |
| 5001 | updated |
A theme was installed or updated through the updater |
| 5002 | deleted |
A theme was deleted |
| 5003 | switched |
The active theme changed |
| 5004 | customized |
A change was saved in the Customizer |
| 5005 | installed |
A theme was installed |
| 5006 | file_edited |
A theme file was edited in the built-in editor |
| 5007 | updated |
A theme was updated |
Posts and pages
| ID | Action | What it means |
|---|---|---|
| 6000 | deleted |
Permanently deleted |
| 6001 | status_changed |
Status changed |
| 6002 | created |
Created |
| 6003 | trashed |
Moved to trash |
| 6004 | restored |
Restored from trash |
| 6005 | published |
Published |
| 6006 | updated |
Updated |
These apply to every public post type, not just posts and pages.
Taxonomy terms, menus, widgets and settings
| ID | Event type | Action |
|---|---|---|
| 7000 | term | created |
| 7001 | term | updated |
| 7002 | term | deleted |
| 8000 | menu | created |
| 8001 | menu | updated |
| 8002 | menu | deleted |
| 9000 | widget | updated |
| 10000 | option | changed |
Option changes cover key WordPress settings such as the site title, tagline, admin email, and default role. Add your own with the kc_lf_tracked_options filter — see Hooks and Filters.
Advanced Custom Fields PRO
| ID | Action | What it means |
|---|---|---|
| 11000 | deleted |
A field group was deleted |
| 11001 | deleted |
A post field was deleted |
| 11002 | deleted |
A taxonomy field was deleted |
See ACF and bbPress deletions.
bbPress PRO
| ID | Action | What it means |
|---|---|---|
| 12000 | deleted |
A forum was deleted |
| 12001 | deleted |
A topic was deleted |
WooCommerce PRO
| ID | Action | What it means |
|---|---|---|
| 13000 | created |
Product created |
| 13001 | deleted |
Product deleted |
| 13002 | trashed |
Product trashed |
| 13003 | restored |
Product restored |
| 13004 | updated |
Product updated |
| 13010 | created |
Order created |
| 13011 | status_changed |
Order status changed |
| 13012 | item_added |
Item added to an order |
| 13013 | item_removed |
Item removed from an order |
| 13014 | item_quantity_changed |
Order item quantity changed |
| 13015 | refunded |
Order refunded |
| 13016 | refund_deleted |
A refund was deleted |
| 13017 | updated |
Order updated |
| 13020 | created |
Coupon created |
| 13021 | updated |
Coupon updated |
| 13022 | trashed |
Coupon trashed |
| 13023 | restored |
Coupon restored |
| 13024 | deleted |
Coupon deleted |
| 13030 | created |
Customer created |
| 13031 | updated |
Customer updated |
| 13032 | deleted |
Customer deleted |
| 13040 | created |
Product category created |
| 13041 | updated |
Product category updated |
| 13042 | deleted |
Product category deleted |
| 13050 | created |
Product tag created |
| 13051 | updated |
Product tag updated |
| 13052 | deleted |
Product tag deleted |
| 13060 | updated |
WooCommerce settings saved |
See WooCommerce store changes.
URL Shortify PRO
| ID | Action | What it means |
|---|---|---|
| 14000 | created |
A short link was created |
| 14001 | updated |
A short link was updated |
| 14002 | deleted |
A short link was deleted |
See URL Shortify Integration Logs.
Gravity Forms PRO
| ID | Action | What it means |
|---|---|---|
| 15000 | created |
A form was created or saved |
| 15001 | trashed |
A form was moved to trash |
| 15002 | deleted |
A form was deleted |
| 15003 | duplicated |
A form was duplicated |
| 15004 | imported |
Forms were imported |
| 15005 | activated |
A form was activated |
| 15006 | deactivated |
A form was deactivated |
A note on IDs and upgrades
Some IDs changed in Logify 1.6.1 because two different events had been assigned the same number. URL Shortify moved from 7000–7002 to 14000–14002, Gravity Forms from 10000–10006 to 15000–15006, session termination from 1008 to 1010, plugin updates from 4005 to 4006, and theme updates from 5006 to 5007. Existing log entries are renumbered automatically when the plugin updates, so historical data stays consistent with this reference.
If you built alerts or reports against the old numbers, update them to the values above.