Daniel Eads Atlassian Team

Hey Novak, After looking at the behavior you've described and seeing that you're on Confluence 6.7, I think it's possible your Confluence instance might be infected with malware due to a security advisory from a couple months ago. I've written a detailed article on how to work on detection for this and steps you can take…

@Matt R unspammed - thanks for reaching out!

Hey Sean, Actually based on a few lines in your log, I think it's possible your Confluence instance might be infected with malware due to a security advisory from a couple months ago. I've written a detailed article on how to work on detection for this and steps you can take for remediation. The things that tipped me off…

This is amazing @Craig Castle-Mead - super handy as I have personally struggled to decrypt what some of these tables were in the past. The names themselves are the last bit of an md5 of the plugin key. Details of how this is generated are here. Unfortunately since it's a hash, it can't just be decrypted - so listing them…

Hey all, I just wanted to add some context that our current metrics show almost all Confluence Cloud requests being delivered to the browser (might take the browser a little more time after that to render the page) in about 3 seconds or less. If you're not getting this experience, follow the articles in Shannon's answer to…

Hi Janna, You should still have the WebDAV plugin disabled if you are not on a version of Confluence where the vulnerability has been patched. If you are still on Confluence 6.14.1, you should leave the plugin disabled as that version is not patched against the vulnerability. What the paragraph is referring to when it…

Based on this connector, Jira's base URL should be configured as: https://atlassian.jail.kav:60006 Can you double-check Jira's base URL setting now in the Administration section to see if it matches there?

Hi Alexandr, It looks like there may be extra parameters in your server.xml connector that are unnecessary. In addition, I think some parameters like secure in your example are not set to what you want them to be. Here's a cleaned up connector for you based on your screenshot: <Connector port="8080" relaxedPathChars="[]|"…

Hey Rachel! I realize this post is a couple years old but just wanted to circle back and let you know about some of the improvements we've been making to the editor in Confluence Cloud and how images are handled now. The new editor should be responsive in both directions in relation to the page. See how this works in…

Hey Sara, You'd need to do some cleanup of malware separately - simply upgrading Confluence won't clean up if your instance has been infected. The article I linked above has instructions for how to detect if malware is on your system and guidelines on how to go about cleaning it up. You don't need to uninstall your…

Hi Pedro, The security advisory details how to mitigate the attack vector for this vulnerability. If you are not on a mitigated version and can't upgrade, using the "temporary workaround" is what you need to do. That is the fix for free. From our licensing FAQ regarding security: Your initial purchase entitles you to…

Hey all, Just wanted to note that JRACLOUD-68779 has been resolved and the quick filters are no longer behind a dropdown! They display directly on the board and are only a click to activate. Cheers, Daniel

Hi Max, I'd be interested in hearing if this is still a problem for you. The update to remove the dropdown recently went out to all Cloud instances. Currently when using it, you should see some highlighting on the quick filters that are selected: Let me know if you're seeing something else! Thanks, Daniel | Atlassian…

Good news all - The quick filters on boards in Jira Cloud are no longer behind a dropdown. This was primarily tracked in JSWCLOUD-16351 and has been live on all Cloud instances for about a month. Thanks for your patience while this was worked on and for all your feedback around the change. Keep the feedback coming! Thanks,…

Hi Thomas, I realize this thread is fairly old at this point but wanted to provide you with some extra information if you were still considering Atlassian Cloud. Based on the size of your Jira instance, I think migrating to Cloud could be a great move. This would offload the heavy administration work to Atlassian - things…

**Update 12/13/2019** Earlier this week, Atlassian accounts began honoring the language preferences set for an entire Atlassian account at: https://id.atlassian.com/manage-profile/account-preferences rather than the preferences set individually in Jira and Confluence. Please visit the link above to set the language…

Hi Srimanta, Confluence 6.13 uses AdoptOpenJDK instead of the previous Oracle JRE for its Java environment. I was able to find similar errors for folks in the OpenJDK project who were running on CentOS 5. What operating system are you running specifically? If you are on CentOS 5 (or another release from that era), you may…

Confirmed - upgrade to Business Class to get the extra team and permission controls. Cheers, Daniel

Hey Chris, You'll see this behavior when the list that the card was originally on is also archived. Luckily, it's pretty easy to recover these cards without having to restore the entire archived list. Recover archived cards on archived lists by moving the cards * Select the card you want to recover (which won't have the…

Hey Ken, I would be interested in knowing what version of Confluence you're on, and if your server is accessible over the internet. We recently saw an attack against a security vulnerability in most versions of Confluence that prevents Confluence from starting up on infected servers. I've written an article about it here…

Hey Vujacic, welcome to the Community. As Bastian linked, it looks like your instance has been attacked due to a security vulnerability. I've written up some general first steps for detection (you've identified a malicious process) on this article. For your case, I would recommend looking at the crontab next (instructions…

Hi Sara, Based on the line in your log file about the macro preview, it looks like your instance has been affected by a malware attack. I've written an article about the security advisories we released several weeks ago and the steps needed to clean up after a malware attack. I'd recommend working through that article, and…

Hey Eliran, I wrote an article with the most common payload we've seen and steps others have taken to clean up from the attack. You can read it here, and it links to additional resources that will be useful. If after reading the article and going through the steps Confluence still isn't launching, here's what would be…

Hey Jonathan, The 6.7.1 release shouldn't be at the top of the page. We're looking into why that is currently. The most recent releases are at the top of the page outside of the 6.7.1 fluke. The absolute most recent version as of today is 6.15.2, which you can get from the non-archive download page. As for 6.6.13 - the…

Hi Christa! I'm glad to hear you're upgrading soon, as we released security advisories recently about the version of Confluence you currently have running. As for the error, it looks like Confluence (or at least the gadget) is trying to load itself over HTTP even though you're accessing it via HTTPS. The most common cause…

Hey Jan, Doing some cleanup is great admin works! Unfortunately as far as I'm aware, Confluence doesn't have an API endpoint for that information. There are a couple ways to go about this without the API. First is via SQL - the embedded Crowd database does keep track of the last login time for users. We have some sample…

Hey Vladimir, On free teams you won't have this info for private boards. That's one of the reasons upgrading to Business Class is the quickest way to get this resolved. Cheers, Daniel

Hi Wanda, Just circling back to see if you were able to proceed past this a couple weeks ago. I noticed the version you were trying to install is actually vulnerable to a security hole we sent an advisory out about. Details of the advisory, mitigation steps, and recommendations are all detailed in this article. Given the…

Hey Adam, welcome to the Community and glad you're really digging in to Jira on your trial! You should be able to interact with the API during your trial. However, we've been making changes to how the APIs are authorized which might have not been apparent in documentation you read. Instead of using the password for your…

Hey there, welcome to the Atlassian Community! We have seen occurrences of the installer failing due to missing system fonts. Luckily this is pretty easy to remedy by installing a font package and trying the installer again. For CentOS 6, you can try the dejavu fonts package: sudo yum install -y dejavu-sans-fonts Give that…