Cloud and Sending Audit Logg to SIEM

nwilkins

Hi,

Is there a way to send the logs to a SIEM tool such as Qradar, ArcSight or ELK?  I see in the documentation that the logs can be exported via CSV via a manual policy but is it possible to automate this and send the Cloud Version Audit logs to an external SIEM?  Is there any documentation on this?

 

Thanks

Petter Gonçalves

Hello @nwilkins

Welcome to the Atlassian Community!

Unfortunately, Jira does not have a functionality to automatically schedule an audit log export, however, we understand how useful this option would be.

That being said, we created the following feature request with our development team to have the option to schedule automatic exports of the Audit log:

Automatic Export of Audit Logs 

Feel free to vote and watch the suggestion to increase its priority and also receive notifications about any updates.

As a workaround, you can create an external script using the JIRA REST API to run the export automatically, in case you have any familiarity with scripting. For the audit log export, you can refer to the following REST Call:

get /rest/api/3/auditing/record

Please, take a look at the provided documentation and let us know if you have any questions.