Audit Plugin
The Audit plugin records supported administrator/user actions so an operator can investigate who changed something and when. It is useful for accountability, but it is not a complete operating-system or security audit log.
- Enable
Auditand open its plugin menu. - Confirm new test actions appear with the expected user and time.
- Review
autoDeleteAuditOlderThanDays(default in the current code: 60 days). - Choose retention according to incident-response, privacy and legal needs.
- Restrict the audit viewer to trusted administrators.
Audit records consume database space. Export/preserve relevant evidence before automatic deletion when investigating an incident.
Does it record SSH, database or web-server changes? No. Use operating-system, database, proxy and hosting logs as well.
Can an administrator alter records? A sufficiently privileged server/database administrator can change data. Send critical logs to protected external storage when stronger evidence is required.
Why is an action missing? Only actions instrumented by AVideo/plugins are recorded. Check the application and server logs at the same timestamp.
| Plugin | Added value |
|---|---|
| MaintenanceMode | Shows a clear maintenance message while administrators work. |
| ReportVideo | Gives viewers an easy way to report content. |
| Notifications | Sends important site events to administrators and users. |
