exp:expuseraudit
The user audit log of an account (Users > Audit): what happened to it and what it did, newest first, filtered by event, result and days.
Script bin/php/expuseraudit.php, code in kernel/private/classes/commands/expuseraudit.php. Run it from the installation root, as the user the web server runs as:
./console exp:expuseraudit --help
./console exp:user:audit --help
php bin/php/expuseraudit.php --helpHelp text
The user audit log of an account
Lists the rows of the user audit log (Users > Audit, the table expuser_audit) about the account or
by it, newest first: time, event, result, who acted, about whom, and the siteaccess. Filter by an
event name or prefix, a result and a range of days. The values before and after are in the JSON
output; passwords and secrets are never in the log. Changes nothing.
./console exp:user:audit jane
./console exp:user:audit jane --event=access.user.password --from=2026-10-01
./console exp:user:audit jane --result=refused --limit=100 --format=jsonOptions
| Option | Value | Help |
|---|---|---|
--event | required | Only events with this name or a name below it (access.user.password) |
--result | required | Only events with this result: success, refused or failed |
--from | required | Only events on or after this day (YYYY-MM-DD) |
--to | required | groups move: the group to move it below (node id or name); audit: only events on or before this day (YYYY-MM-DD) |
--limit | required | How many to list (default 25, at most 500); bulk: the most accounts one run may change (default 500, at most 5000) |
--offset | required | Skip this many first (the next page: --offset=25) |
--format | required | text (default) or json (the machine output exp-user/1) |
Read from the option definitions in the code (startup(), getOptions(), options() or ezcConsoleOption). Every script also takes the standard options of the script framework (--help, --siteaccess, --debug, --quiet, --allow-root-user ...).
Arguments: [user].
Related
Generated by ./console exp:help:examples from bin/php/expuseraudit.php, kernel/private/classes/commands/expuseraudit.php. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.