What do you find really missing from Jira Audit Log?

[Alexander Stern _ Shern Consulting OÜ]

Hello,

When using Audit log, we noticed that it was impossible to filter out what I'm looking for and focus on things I needed to investigate and exporting as PDF for internal review and audit.

That's why we started developing apps to cover the gaps - found here: 
Apps by Shtern Consulting OÜ

They already now allow easy filtering and exporting! We also plan to:

1. Develop ability to diff between objects, like workflows, roles, fields, etc, wherever it is possible to retrieve comparable structures and identify what changed. Something like Jira Versioning System.

2. Add Configurable Alerts - like, to notify via Email or Slack when Workflow or Permissions or Automation rules change.

My questions to the community:

1. What features are needed from such an app?
2. What features are not found in other apps on the marketplace?
3. What features should remain free and which have enough value to be paid for?

Looking forward for the answers!

Thanks!

[Arkadiusz Wroblewski]

Hello @Alexander Stern _ Shern Consulting OÜ 

For me, the main gap is not that too little is logged. It is that when you actually need to investigate a problem, the audit log is often still too generic.

You can see that something happened, but not always what exactly changed, what the state was before, and what the real impact was afterwards.

A good example from my side is around SCIM-synced groups. Those changes can directly affect access and permissions, but the audit trail often is not granular enough to properly trace the issue.

I had a problem where one group after deletion was deleted directly here and I can't Reproduce which spaces from Confluence and Jira was affected.

So for me, what is really missing is not more entries, but more useful detail in the existing ones. That would help much more in real troubleshooting cases.

[Alexander Stern _ Shern Consulting OÜ]

Thank you @Arkadiusz Wroblewski ! 

So this indeed confirms the need to be invest into developing the version control of part tracked by the Audit Log. Be it permissions, workflows, fields, automation rules, etc.

These before vs after synced to the detected changes as much as possible seem the way to go.

I thought about taking a snapshot at the installation time of these, per App, and then, each time a new change is detected, to retrieve the added/modified piece as it is now and generate the visual diff.  

And in your case it was SCIM groups and permissions, yes.