Hi David, we do add a log entry when users save changes to content filters, but it doesn't look like we indicate which content filter was changed: 

[2025.12.08] 05:58:58.338 [10.1.1.126] User webmail@test.com calling set content filters

I also checked our Content Filter log category and we don't note administrative events here. Lastly I checked my test user's settings.json file and it doesn't look like we track that the last changed information there either. While it won't help you at the moment, I'm going to submit a feature request to have this noted in one of the above locations so with any luck that will be available in the future. If you do end up needing a hand in the meantime please don't hesitate to reach out to our support team as well. We're happy to help!

Hi Kyle.

Thanks for adding a feature request !

I would really like to see more places where the date /time of some action done, is noted.

We are using Build 9014, so some of these may be updated already, but still, here is part of my list.

Under Manage :

Domains : Does not show you when a domain was created or last updated.

IDS Blocks : Tells you how much time is left, but does not tell you when the event was triggered

IP Connections : Tells you the number of connections, but not when the last event happened.

User Connections : Tells you when a connection was done, but does not match those with the IP Connection address

Password Requirements : Tells you the age a password expired, but not the date/time

Troubleshooting : Tells you services are running, but does not show the date/time they started.

Under Settings :

Security / IDS Rules : Does not tell you when the rule was created or last triggered.

Blacklist, WhiteList and SMTP Blocks : Does not tell you when the rule was created or last triggered.