How can I audit exporting of Jira issues?

[Daniel Steffano]

I'm looking through the Jira system logs to see if there's an audit trail of users who may have processed a bulk export of issues. I can't seem to find any with the default verbosity set - is this intended? Perhaps I'm looking in the wrong area. 

We are running Jira Server 8.22.x

I do have Scriptrunner if that will help us here.

Thanks!

[Peter-Dave Sheehan · Accepted solution]

Generally, only things that change the underlying configuration/data is audited.

I don't think that can be modified.

The only way would be to disable the built-in export functionality and build your own that includes an explicit call to create an audit log.

But there are so many ways that issues can be exported (using REST API for example) that it might be difficult to control.

[Daniel Steffano]

Thanks for your reply, any ideas on what sort of REST API actions I should look for in the logs, that you know of?

[Peter-Dave Sheehan]

No, I don't off the top of my head. 

But the way I'd find out is to monitor the logs closely and perform a sample export myself and see what gets logged (if anything).

[Daniel Steffano]

Yeah, I did try.. no dice! Well, anyway, thanks for your guidance!