snipe-it/app/Observers/AssetModelObserver.php

<?php

namespace App\Observers;

use App\Models\Actionlog;
use App\Models\AssetModel;

class AssetModelObserver
{
    /**
     * Listen to the User created event.
     *
     * @return void
     */
    public function updating(AssetModel $model)
    {

        $changed = [];

        foreach ($model->getRawOriginal() as $key => $value) {
            // Check and see if the value changed
            if ($model->getRawOriginal()[$key] != $model->getAttributes()[$key]) {
                $changed[$key]['old'] = $model->getRawOriginal()[$key];
                $changed[$key]['new'] = $model->getAttributes()[$key];
            }
        }

        // Restoring a soft-deleted row fires `updating` (Laravel's
        // restore() ultimately calls save()), which would otherwise
        // log an "update" entry showing deleted_at flipping to null.
        // The `restoring` observer already logs a dedicated "restore"
        // entry for the same event, so filter deleted_at + updated_at
        // out of the diff and skip the update log if nothing else
        // changed. Same rationale on the soft-delete side, but Laravel's
        // SoftDeletes trait uses a raw UPDATE that skips model events
        // entirely, so this branch never fires for delete.
        unset($changed['deleted_at'], $changed['updated_at']);

        if (count($changed) > 0) {
            $logAction = new Actionlog;
            $logAction->item_type = AssetModel::class;
            $logAction->item_id = $model->id;
            $logAction->created_at = date('Y-m-d H:i:s');
            $logAction->created_by = auth()->id();
            $logAction->log_meta = json_encode($changed);
            $logAction->logaction('update');
        }

    }

    /**
     * Listen to the Location created event when
     * a new location is created.
     *
     * @return void
     */
    public function created(AssetModel $model)
    {
        $logAction = new Actionlog;
        $logAction->item_type = AssetModel::class;
        $logAction->item_id = $model->id;
        $logAction->created_at = date('Y-m-d H:i:s');
        // Fallback to the model's own created_by so seeder / artisan
        // paths (no authenticated user) still attribute the create log
        // to a real user. On web requests auth()->id() is always set,
        // so the fallback never engages there.
        $logAction->created_by = auth()->id() ?? $model->created_by;
        if ($model->imported) {
            $logAction->setActionSource('importer');
        }
        $logAction->logaction('create');
    }

    /**
     * Listen to the Location deleting event.
     *
     * @return void
     */
    public function deleting(AssetModel $model)
    {
        $logAction = new Actionlog;
        $logAction->item_type = AssetModel::class;
        $logAction->item_id = $model->id;
        $logAction->created_at = date('Y-m-d H:i:s');
        $logAction->created_by = auth()->id();
        $logAction->logaction('delete');
    }

    public function restoring(AssetModel $model)
    {
        $logAction = new Actionlog;
        $logAction->item_type = AssetModel::class;
        $logAction->item_id = $model->id;
        $logAction->created_at = date('Y-m-d H:i:s');
        $logAction->created_by = auth()->id();
        $logAction->logaction('restore');
    }
}