How can I access stash login attempt logs?

[Sam Selfridge]

Ever since I changed my password, I have to enter my captcha at least once a day - I suspect its an old machine that I authorized with tortiseGIT a while ago, and now is causing my account to get captcha locked.

Looking at https://jira.atlassian.com/browse/STASH-3075 it appears this is now implmented in Stash - how can I get access to my audit logs?

[cofarrell]

Hi Sam,

Have you seen the documentation for audit log?

https://confluence.atlassian.com/display/STASH/Audit+logging+in+Stash

The audit log will be outputted to the $STASH_HOME/log directory.

Also, you might want to take a look at $STASH_HOME/log/atlassian-stash-access.log, which will show you all the http activity and might give you an idea of what IPs are accessing Stash, although depending on how active your server is I'm not sure how hard it will be to track down.

Finally, it may help help to enable debugging for the authentication class in Stash, which you can even do without restarting:

com.atlassian.stash.internal.spring.security.PluginAuthenticationProvider

You should see something about authentication failed and "CAPTCHA required", which will then help to find the appropriate access attemp.

I hope that helps.

Charles

[Sam Selfridge]

I was able to find the culpret - old test bamboo instance that I thought was turned off -

Anyway - Looking at our stash install $STASH_HOME/ dir has a logs folder, not log and theres no atlassian-stash-access.log in there.

I don't have admin access on that server so I don't think I can do much more.

[cofarrell]

There should be a log directory, the logs directory is from Tomcat which is different. I suspect your admin may have configured them to be outputted somewhere different.

[Sam Selfridge]

ya i found them - but the atlassian-stash-access.log didn't have anything about captcha for my user failing - possibly my admin just doesn't have logging setup up to the level that would output that.