Jira Cloud Administrative Logging

[Ryan Gott]

As a Security Engineer I am looking to monitor certain events in a Jira Cloud instance, particularly, events for instance/tenant level administrative changes. In addition to that, I would like to monitor configuration changes to the installed apps. I haven't really found anything other than using webhooks to send audit event logging to a third party logging solution, but the documentation around audit logging is mostly for user events and project level events. How have others achieved this? 

[Sid Pathirana]

Hi @Ryan Gott - if you're an Org Admin in cloud you will have access to the Audit Log in the Security menu. This allows you to filter on 367 event types categorised under the following areas - depending on what you're after exactly, some of these categories may contain log entries for the type of events that you want to monitor against.

• Jira User Actions
• User provisioning
• User management
• Atlassian accounts
• Settings
• Security policies
• Bitbucket cloud workspace actions
• Confluence user actions
• Bitbucket cloud repository actions
• Jira Service Management product actions
• Organizations
• User access settings
• Products
• Bitbucket cloud product actions
• Bitbucket cloud user actions

[Ryan Gott]

@Sid Pathirana thanks, those would be the types of logs that I am interested in, but I don't see those event types available using the audit logging via webhook.

[Sid Pathirana]

Hi @Ryan Gott - I don't think the Audit Log supports webhooks to push data/events out. It does however have a basic export to CSV feature and also the ability to access the log data via the Organizations REST API if either of them are suitable workarounds for you?