Trying to view audit history for a deactivated Confluence user

[Diatta Harris]

A Confluence user has been deactivated and we are attempting to view their past activity in Confluence prior to the point their account was activated.  Is that possible?  Our Okta records show the user logged into Confluence within the past 24 hours prior to deactivation but in viewing the logs am unable to find any activity.  I can only see the deactivation activity tied to that user's login.  Please advise.

[Alex Koxaras -Relational-]

Hi @Diatta Harris 

Confluence audit log shows specific things such as:

• Spaces

  • Created, archived, or deleted

  • Exported or imported

  • Configuration updated

  • Logo uploaded

  • Trash emptied

• Users and groups

  • User created, deactivated, or reactivated

  • User details updated

  • User added to or removed from group

  • Group added or deleted

• Global administration

  • Global settings changed

  • Site logo changed

  • Color scheme modified

• Permissions

  • Global permission added or removed

    • including “anonymous” access

  • Space permission added or removed

    • including “anonymous” access

  • Content restriction added or removed

• Public links

  • Enabled or disabled

• Content

  • Archived or restored

  • Viewed with admin key

• Templates

  • Created or updated

The audit log doesn't record information related to content edits (you can view this in the version history) or changes to a content’s location.

https://confluence.atlassian.com/doc/audit-log-events-in-confluence-1005333793.html

You will not be able to find there any log of the user's activity in regards to which pages he viewed or edited. If you have Guard Premium, then you might be able to find the user's log activities. Read more here https://support.atlassian.com/security-and-access-policies/docs/accessing-audit-log-activities/ and see the features here https://www.atlassian.com/software/guard/pricing

Hope the above helps!