Looking for up-to-date Help documentation? Documentation for the latest releases of Totara is now available at totara.help!

Visit the new Help site

Course Overview

  • You are here: Home > Administration > Reports > Course Overview

To obtain course overview reports, you must first enable statistics. If you haven’t got statistics enabled you will be taken to the enable statistics settings. You can choose to view reports of the most active courses or the most participatory courses over a certain time period. Results are displayed in a bar chart and in a table.


  • You are here: Home > Administration > Reports > Logs

You can select any combination of course or site, participants, date, activity and actions and choose whether they are displayed on the logs page or downloaded in text, ODS, or Excel format.

Live logs

  • You are here: Home > Administration > Reports > Live Logs

This allows you to define a number of parameters to run a report on activities within the system.

Live logs provide the following fields:

  • Course - course short name
  • Time - time of access
  • IP Address - unique user internet address
  • Full Name - name logged on with
  • Action - what they were doing
  • Information - any further information on the activity


  • You are here: Home > Administration > Reports > Questions

This gives a report of any problems found in your question database – the question database is used to store questions in categories. These are used by quizzes and lessons to create question banks.

Report Heading Block

  • You are here: Home > Administration > Reports > Heading Block

The Report Heading Block is a block of data about a specific user that can be included in various pages across the site (for instance on the 'Record of Learning' or 'Learning Plans' pages). It contains information about the user such as their name and personal details.

The exact contents of the block is defined by adding, removing and reordering fields in this form.

Adding items: To add an item, select the field you want from the drop down menu labelled 'Choose another column...'. Enter a column heading, which will appear as a title next to the field's value. You can also specify a value that will appear if no data is found for that user. Click 'Save Changes' then repeat to create multiple new items.

Updating items: To change the Heading or missing text for an item, update the text fields then click on the 'Save Changes' button. You will be returned to the form with the new values in place.

Deleting items: Click 'Delete' next to an item's name to remove it from the heading block. You will be asked for confirmation of your choice.

Re-ordering items: You can change the order in which items appear in the list by clicking the up or down arrows located next to each item.

Security Overview Report

  • You are here: Home > Administration > Reports > Security Overview

This provides the site administrator with a report that highlights any security problems that need to be remedied.

The security issue is described and also the priority that needs to be given to the problem .


  • You are here: Home > Administration > Report > Spam Cleaner

Spam cleaning script

This lets you look for keyword that spammers use and highlight and delete user accounts that have these words included in content that they have created.

The best thing to do is use the Security report to analyse your configuration. Then do all the things it tells you.

Note: this is not strictly necessary to combat just profile spam (see the critical settings below) but it will protect you against dozens of other known security vulnerabilities.

Critical settings

  1. Make sure that 'register_globals' is switched off in your PHP settings (this is the default). Otherwise your site may be at risk of being hacked.
  2. Keep "Force users to login for profiles" enabled in Administration > Security > Site policies to prevent anonymous visitors and search engines from seeing user profiles.
  3. Keep "Profiles for enrolled users only" enabled in Administration > Security > Site policies. This will prevent affected profiles from being visible even to other users on the site.

Strong recommendations

    1. Make sure you upgrade your site often. Recent versions of Totara have new fixes and warnings that will help you avoid security issues.
    2. Consider the spam risks involved in allowing certain capabilities for visitor accounts, such as replying to forum posts or posting to blogs.

Allowing self-registration

If you don't need it, please keep self-registration disabled (it's the default) in Administration > Users > Authentication > Manage authentication common settings.

If you must use Email-based self-registration to allow people to make their own accounts then:

  1. Add spam protection to the new account form by enabling reCAPTCHA. ReCAPTCHA is quite effective against most automated spambots, but will not foil human spammers at all
  2. Limit self registration to particular email domains with the allowed email domains setting or deny email addresses from particular domains, such as mailinator.com and temporaryinbox.com, with the denied email domains setting. Both settings are in Administration > Users > Authentication > Manage authentication common settings
  3. Consider only enabling self registration for a short period of time to allow users to create accounts, and then later disable it
  4. Keep "Email change confirmation" enabled in Administration > Security > Site policies.

Cleaning up spam

If your site was open in the past and you have a spam problem then here are some things you can do to clean up the profiles:

  1. Use our Spam cleaner report. Alternatively you can download a version of the spam cleaner script and run it in your existing Totara site
  2. Browse your user list looking for patterns to detect users who need to be deleted. For example, spammers might have chosen a country that none of your real users has
  3. Use the Bulk user actions tool under Administration > Users > Accounts to find all these users and delete them.


  • You are here: Home > Administration > Reports > Statistics

To obtain statistics reports, you must first enable statistics reporting, see 'Statistics' under 'Server'. See Statistics to learn more.

You can select any course or the whole site and choose to view reports of all activity, all views, all posts, or all logins over a certain time period. Results are displayed in a line graph and in a table, which contains links to course logs.




Still have questions? Why not post them in the forums of the Totara Community.

  • No labels