This module track logs of specific events that you'd like to review. The events performed by the users (using the forms) are saved in the database and can be viewed on the page admin/reports/audit-trail. You could use this to track the number of times the CUD (Create, Update & Delete) operations are performed by specific users. It gives site owners, project managers and compliance teams a clear answer to: who did what, when, and from where.
Currently, the following sub modules of Admin Audit Trail are supported:
Admin Audit Trail User Authentication
Logs user authentication (login logout and request password).
Admin Audit Trail Block Content
Logs block content CUD events performed by the user.
Admin Audit Trail Comment
Logs comment CUD events performed by the user.
Admin Audit Trail Config
Logs configuration CUD events (site settings, content types, fields, views, and other configuration).
Admin Audit Trail Entityqueue
Logs entityqueue CUD events performed by the user.
Admin Audit Trail File
Logs file CUD events performed by the user.
Admin Audit Trail Group
Logs group CUD events performed by the group.
Admin Audit Trail Logger
Forwards every audit event to the Drupal logger (syslog, Monolog, dblog) for SIEM and log-aggregation pipelines, in hybrid or PSR-3 only mode, with a configurable channel and per-operation severities.
Admin Audit Trail Media
Logs media CUD events performed by the user.
Admin Audit Trail Menu
Logs menu CUD events performed by the user.
Admin Audit Trail Node
Logs node CUD events performed by the user.
Admin Audit Trail OpenID Connect
Logs Active Directory (Windows Azure AD / Entra ID) logins made through OpenID Connect.
Admin Audit Trail Paragraph
Logs paragraph CUD events performed by the user.
Admin Audit Trail Redirect
Logs redirect CUD events performed by the user.
Admin Audit Trail Taxonomy
Logs taxonomy vocabulary and term CUD events performed by the user.
Admin Audit Trail User
Logs user CUD events performed by the user.
Admin Audit Trail User Roles
Logs user role assignment and removal events.
Admin Audit Trail Workflows
Logs content moderation (workflow) state changes on all moderated entity types (nodes, media, custom blocks, and more).
The event log tracking could be easily extended with custom events. Events triggered from the command line (Drush) can also be recorded when the "Log CLI events" setting is enabled, flagged in the report.
Compatible with Drupal 10.1+, 11 and 12. Covered by automated unit, kernel and end-to-end functional tests.
Other helper modules:
Sponsored and developed by Vardot.
Project information
- Project categories: Administration tools
8,390 sites report using this module
- Created by mohammed j. razem on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.



