# Activity Logs

https://docs.wisecp.com/es/action-logs

Answer "who did this, and when" from one place: every recorded action with its actor, time, address and changed values.

## Opening the Screen

Open `{admin}/tools/actions` from the Tools menu. The chosen tab stays in the address, so `{admin}/tools/actions?type=admin` opens straight on staff actions.

## What Is on the Screen

Three tabs carry the same table, split by who acted. Each tab has its own search box and paging, and lists the newest record first. The download button beside the search box exports the filtered list as CSV, JSON or XML.

- **Client**: Actions taken by client accounts.
- **System**: Actions with no person behind them: scheduled tasks, automatic status changes, background work.
- **Administrator**: Actions taken by staff accounts.

Every tab uses the same four columns plus a detail button.

- **By**: Who acted. The name opens that client or staff record when you have access to it; otherwise it stays as plain text.
- **Description**: A sentence saying what was done. Long text is shortened, and the whole of it appears on hover.
- **Date**: When the action happened.
- **IP Address**: Where the action came from. The lookup button beside it finds the other records from the same address.
- **Row detail**: The arrow button at the end of a row opens the full record: the user id, the record key, and the stored data as a tree you can expand or collapse.

The **Clear Logs** button next to the page title opens the deletion dialog.

## Fields

These two belong to the **Clear Logs** dialog. Both are required.

- **Select Date**: The cut-off. Everything recorded before this date goes, while that day's own records stay. No default: pick a date each time.
- **Enter your account password for security verification.**: Your own panel password, confirming the deletion came from you.

## Tasks

### Find who changed something

1. Pick the tab that matches the actor you expect, then search for the client, the staff member or the address.
2. Read the Description column to spot the row you want.
3. Open the row detail with the arrow button; the changed fields and their old and new values are inside.

### Trace an address

1. Use the lookup button in the IP Address column.
2. The other records from the same address appear, which is how you see a shared or suspicious account.

### Clear old records

1. Click the **Clear Logs** button.
2. Pick a cut-off date and type your account password.
3. Click **Confirm**. The matching records go and the page reloads with the shorter list.

## Things to Watch

> **Clearing is not limited to the open tab**
> 
> The dialog deletes client, system and staff records together, all of them from before the date you choose. Deletion cannot be undone, and the records are your audit trail. Choose a date you are sure about.

> **Old records are removed on their own**
> 
> A daily maintenance task deletes activity records older than the retention period set on the Automation screen. Where you need a long history, check that period before you rely on it.

> **Module traffic lives elsewhere**
> 
> Calls between the panel and server, registrar or payment modules are kept out of this list. Look for those on the Module Logs screen.

## Required Privileges

The screen and the **Clear Logs** dialog both need `TOOLS_ACTIONS`. The names in the By column link out only for staff who can open a client or a staff record; without that access the name appears without a link. The download button beside the search box follows the panel-wide `TABLE_EXPORT`; an account without that privilege never sees the button.

## Related Articles

- [Session Logs](https://docs.wisecp.com/en/session-logs)
- [Module Logs](https://docs.wisecp.com/en/module-logs)
- [Error Logs](https://docs.wisecp.com/en/system-error-logs)
- [Client Activity Logs](https://docs.wisecp.com/en/client-activity-logs)