MainWP now has a very useful way to track changes made on both the MainWP Dashboard site, as well as tracking changes to connected child sites using Activity Log for MainWP extension.
Next, you will need to install the Activity Log for MainWP extension on your MainWP Dashboard site.
Once the Activity Log for MainWP extension has been installed, follow the setup wizard for which child sites where WP Security Audit Log is installed and activated, and where you want to bring the logs over from.
To view the activity log on the MainWP Dashboard site, go to MainWP > Extensions > Activity Log for MainWP
To retrieve an activity log from a specific child site, you can select it from the sites list.
WP Security Audit Log Settings
If you need to configure the Activity Log, you can easily do so by following this post.
There is a great getting-started post which covers everything you will need for setting up Activity Log for MainWP extension on your MainWP Dashboard site.
If you need a list of every MainWP-related event that will be tracked, this post will cover those.
Another handy feature enabled by default on child sites is the MainWP child site stealth mode. The plugin WP Security Audit Log will be hidden from the list of active plugins on the child sites. The audit log will only be available for admin users. It is also possible to show the WP Security Audit Log plugin on the child sites.
It is possible using the bulk settings extension to change the stealth to be disabled using this key.
Activity Log for MainWP and the Bulk Settings Manger Extension
If you need to know more about where WP Security Audit Log stores the log entries this post covers which three custom database tables are created and what those tables are used for.
Using the Activity Log for MainWP extension on your MainWP Dashboard site, along with the WP Security Audit Log plugin on your child sites, will allow you to track changes on both the MainWP dashboard site and all connected child sites.
Having audit logs of your child sites will help with managing security and tracking changes made on those sites.