Jira audit log to download attachments

[Pavel Junek]

Hi Community!

We would like to store sensitive information in the form of attachments in Jira, internally. To approve this action, the Security Department requires an increase in the level of logging of work with attachments.
Above all, they require that the download of any attachment be recorded in the log.

Currently, if I enable HTTP Access Logging in Jira, only information about the use / download of attachments is saved in the log using only the "Download all" button and saving to a zip file:

10.10.10.10 o478x18954x21 pavel.junek [06/Aug/2020:07:58:52 +0000] "GET http://domain.com:38080/secure/attachmentzip/50800.zip HTTP/1.1" 200 54484 0.0990 "http://domain.com:38080/browse/ATLSP-895?jql=project%20%3D%20%22Atlassian%20tools%20VF%20support%22%20" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36" "9edecy"

Downloading an individual attachment is not recorded in this log in any way (even if the attachment is displayed in the browser and then Save as... or Download button).

How can I please increase the logging level so that this download information is always displayed in the log?

Has anyone solved this problem as well?

Thank you!

Cheers

Pavel J.

[Pavel Junek · Accepted solution]

Hi Community,

I managed to solve this problem, at least with the help of addon to the Marketplace. I would like to introduce you to that Access Log for Jira, which allows you to log the download (display) of attachments (but also many other things).

Cheers

Pavel