Today, a coworker asked me why I posted a comment under her Jira ticket which is totally unrelated to my daily work. However, I did not create or submit that comment myself. I checked a few things but still couldn't figure out where it came from, please help. * My PC and my phone were all under my hands at that moment, and they were the only two available devices have my account access. * According to the Atlassian audit log, no user action was executed, under my account at that moment. * According to the ticket, the automation section is empty and showing "There are no recent rule runs for this issue." * The format of the comment posted is quite AI to me. However, no record on using AI or Rovo under my account at that moment. * No Clawbot installed on my PC or phone. I attached the audit log below, while the comment was posted on Mar 11 at 10:31 EDT.

I'm out of ideas too. Atlassian Support should enjoy reading this thread and all the ideas we've had. I'll be interested to hear if you work out what caused this

I have exhausted all my ideas. Have you seen the problem recur or was it a one-off? To get additional help at this point I recommend opening a support case directly with Atlassian.

I checked system webhooks, the listed 3 webhooks are all restricted with JQL so should not be the cause. The only suspicious thing is it shows 4 webhooks found but only list 3 below.

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Comment posted under my account, but I did not post it

Luyang Zhang_q6wbuh

Today, a coworker asked me why I posted a comment under her Jira ticket which is totally unrelated to my daily work. However, I did not create or submit that comment myself.

Screenshot 2026-03-11 112344.png

I checked a few things but still couldn't figure out where it came from, please help.

My PC and my phone were all under my hands at that moment, and they were the only two available devices have my account access.
According to the Atlassian audit log, no user action was executed, under my account at that moment.
According to the ticket, the automation section is empty and showing "There are no recent rule runs for this issue."
The format of the comment posted is quite AI to me. However, no record on using AI or Rovo under my account at that moment.
No Clawbot installed on my PC or phone.

I attached the audit log below, while the comment was posted on Mar 11 at 10:31 EDT.

Accepted answers

All comments

Matt Doar _Adaptavist_

Did you mean 9:31 EDT?

Any chance there is another user with the same name?

I would suspect an automation being run as you, somewhere else?

Luyang Zhang_q6wbuh

Hi Matt,

I was referring to 10:31 EDT which is the comment in the first screenshot above.
I am the org admin and there is no user in my org with the same name and same profile picture.
I checked the automation history under the ticket and global automation log, nothing related happened at that moment.

John Funk

You need to click the Refresh button under the Automation section to see the rules that have run.

Trudy P Claspill

Hello @Luyang Zhang

The Audit Log you are referencing in your screen images does not record actions taken at the issue level. That log is for recording Jira application setting level actions, like change configuration elements.

Besides Automation Rules there are a number of other ways that comments can be added to an issue automatically, such as through workflow Post Functions or actions taken through a script.

Is the comment referencing an issue that is linked to the issue where the comment appeared?

Did you execute an action on the issue referenced in the comment?

If the issue referenced in the comment was linked to the issue commented at the time, there may be something related to the transitioning of that referenced issue that causes comments to be added to the linked issues.

Luyang Zhang_q6wbuh

Hi John, I have click that button several times but still shows nothing.

Luyang Zhang_q6wbuh

Hi Trudy, thanks for your reply.

Did you execute an action on the issue referenced in the comment?

Yes, as the mystery comment shows, the referenced issue was marked as done at exactly that moment.
However, between these two issues, they are not parent-child, not linked by any linked type, no associated field, besides they are under the same JSM project with same request type, reporter and assignee.
I checked the workflow and the issue history and no new found. There was no workflow transition for over a week on this issue.
No automation was executed at that time as I posted below.
- Ref: https://community.atlassian.com/forums/Jira-questions/Comment-posted-under-my-account-but-I-did-not-post-it/qaa-p/3205263#M1172077

image (1).png

Trudy P Claspill

Let me see if I understand the flow of events:

1. You transitioned AAA-1 to Done
2. In AAA-2 within moments a comment appears with a link to AAA-1 and a message that it was transitioned to Done, with you as the author of the comment.

You said there is currently no link between AAA-1 and AAA-2. Did you check the issue history of both to see if any such link existed at the time of the comment, which was subsequently removed?

Have you looked at the workflow for that issue type and examined the transition to Done to see if it includes a post function to create a comment?

Do you have a third party app that provides Listener functionality, to listen for events and execute actions? ScriptRunner is one such app. JMWE is another. If so, is one set up to listen for transition events in this project and take some action, like adding a comment.

There is also the native System Webhook functionality that can listen for events and fire REST API calls in response. Does one exist that would react to transitions in this project?

Luyang Zhang_q6wbuh

The flow of event is:

Coworker X (not me) transitioned AAA-1 to Done
In AAA-2 within moments a comment appears with a link to AAA-1 and a message that it was transitioned to Done, with me as the author of the comment.

I just checked the history of those two issues, and no history of linking found.

The only action executed by me on those two issues was I updated their request type.

I checked the workflow and there is no post function on any path.

For third party app, we only have Time Tracker and Zephry installed on our instance and I don't think they provides Listener functionality.

I checked the API token log, indeed, there were several API got called that day (don't know the specific time and frequency). However, none of them belongs to me and none of those user has admin permission, so they should face a 403 even they tried to post with my account.

Screenshot 2026-03-12 152317.png Screenshot 2026-03-12 152636.png

Screenshot 2026-03-12 153700.png

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-cloud