01 / Tools and operations / F.04How it works
F.04

Audit and activity log

Every change made in the panel is recorded with who made it and when. Filter the activity log by job, alert, account, server or security to find the change you’re after, such as the moment a firewall was switched off. Work the panel does on its own is logged under its own name, so nothing is put down to “the system”.

Screen sheetF.04
Topic
F · Tools and operations
Order
04 / 08
Points
05
Panel support
4 / 4 panels
02 / FigurePanel screen
Hover the numbers
app.ctapanel.com/audit-logAudit logLast 24 hours · 128 entriesExportAllJobAlertAccountServerSecurityPackageSSLReportEventActorKindWhenFirewall turned off on rs01.nycMert Y.Security09:42Account atolyeyedi.com suspendedSelin D.Account08:17Backup job failed on web02.fractapanel-agentJob03:04Quota raised to 20G on “Pro 20”Mert Y.Packageyesterday 18:55Certificate renewed for mavipencere.com.trctapanel-agentSSLyesterday 11:20Every row has an actor: nothing is waved off as “the system did it”, and the agent’s own work is written under the agent’s name.Destructive actions land here with a summary as well as asking for confirmation.The root access screen also keeps its own per-server history: password rotations, sshd policy changes, key additions and revocations.0102030405
  1. 01Eight type filtersFilter by job, alert, account, server, security, package, SSL or report.
  2. 02An actor on every rowActor and timestamp on each row; the agent’s work is under its own name, never “the system”.
  3. 03Destructive, summarisedDestructive actions ask for separate confirmation and are written here with a summary.
  4. 04Root access historyThe root access screen keeps per-server password rotations, policy changes, keys added and revoked.
  5. 05Same source as dashboardThe stream is fed from the same source as the dashboard’s recent activity block.
Fig. 02 — Audit and activity log
03 / What it does5 points

What it does.

If a server’s firewall is off, you can find out within minutes when it happened and who did it. The panel’s own work is logged under its own name, so no row ends with “the system did it”. Destructive actions ask for confirmation and leave a summary here as well. The root access screen also keeps a separate history for each server: password changes, keys added and keys revoked.

  1. Eight type filters: job, alert, account, server, security, package, SSL and report.

  2. Every row has an actor and a timestamp. Nothing is written off as “the system did it”.

  3. Destructive actions ask for separate confirmation and are logged here with a summary.

  4. The root access screen keeps its own per-server history too: password rotations, policy changes, keys added and revoked.

  5. The log is fed from the same source as the recent activity block on the dashboard.

04 / Panel-by-panel support4 / 4 panels

Which panels support it?

Capability Audit log

  • yesManaged from the panel
  • yesManaged from the panel
  • yesManaged from the panel
  • yesManaged from the panel

Servers without a control panel have no account, reseller or mailbox management, because those come from the panel itself. Firewall, DNS, services and the terminal work over SSH. See the full table

05 / Tools and operations8 screens

Tools and operations

Tools that make the daily work easier and leave a trail.

06 / Get started14 days free · No card needed

Connect your first server today.

Free for 14 days, no card needed. Create your account, add your first server with an API token or an SSH key, and the panel starts filling in a few minutes later.

No setup fee · Cancel anytime · EU-hosted