Event categories & severities
How events are classified, and what each severity level means.
Every event belongs to one of nine categories and carries one of four severities. Severity is never conveyed by colour alone — each badge also has an icon and a text label (WCAG AA).
Severities
- Info — routine activity (e.g. a sign-in).
- Notice — meaningful but expected changes (e.g. a post published).
- Warning — worth a look (e.g. a burst of failed logins).
- Critical — high-signal, security-relevant (e.g. a user escalated to Administrator, a plugin deleted).
Severity drives sorting, filtering, and which events trigger notifications. You can email the admin on Critical events, and (premium) route events to Slack by minimum severity.