Joomla Action Log review

Joomla records admin actions in its own User Actions Log, but few people read it. The Joomla Action Log Review card under Settings → Analysis shows only the security-relevant slice, newest first.

What is included

• Extension installs, updates and uninstalls
• User and group changes, and new accounts
• Global Configuration saves
• Template and module saves

Logins are deliberately excluded - the Shield brute-force protection and privileged-login alerts already cover them.

Use the 24 hours / 7 days / 30 days buttons to change the window. Rows marked Review are extension installs and possible privilege changes (a user-group change or a new account). Joomla's log does not record which group was granted, so check the user in Users → Manage.

Scheduled alert

The scheduled check emails the alert address once when a new install or privilege-change row appears since the last check. The first run only records a starting point, so you are not flooded on day one.

If the card says no actions were recorded

That usually means the Action Log plugins are switched off, not that nothing happened. Use the link on the card to open the plugins and enable them.

The card is visible to Super Users only, matching Joomla's own restriction on the Action Log, and needs an active Pro license.