Currently logs for different courses can be merged into other courses when restoring. It is nearly impossible to tell what logs came from where; i.e. if a log was created by a user viewing this exact course, or if it was created in another course and restored in.

Luckily, due to what seems like an oversight you can actually tell if they are restored or true logs, because restored logs will have no origin because of https://tracker.moodle.org/browse/MDL-75243 - but I think this should be a properly supported feature.

This would be useful firstly to aid the integrity of the logs, as it would enable users to see if particular logs might have been restored (possibly accidentally or unknowingly) in from other courses.

It would also enable users who wish to do so to backfill the true timecreated of courses as described here by looking at the logs https://tracker.moodle.org/browse/MDL-70467

This could be done a few ways:

• Store the original course id (for which the action was done in) - most ideal
• Store a boolean flag for 'restored' vs 'true' logs - less ideal