Notification when a product admin installs a marketplace app

[Philip Kroos - TEAM XALT]

Dear Community,

I’m seeking a way to receive notifications whenever a product admin installs a Marketplace app. To give you some background, we are on an Enterprise license and manage multiple Jira and Confluence sites for different subsidiaries. As site admins (or org admins), we need a method to be alerted when a product admin installs a new Marketplace app.

With numerous sites and product admins, relying on each admin to inform us individually has proven unreliable. I understand there’s an audit log in the “Manage Apps” section where we can see who installed a Marketplace app, but this only covers actions from the past 90 days. From my research, there doesn’t seem to be a way to access this audit log via API.

Are there any workarounds or features I might be missing that could help us receive these notifications? Any suggestions or guidance would be greatly appreciated.

Thank you!

[Utkarsh Agarwal · Accepted solution]

Hi @Philip Kroos - TEAM XALT 

I’ve noticed that the Admin Audit Logs capture events like "Jira app successfully installed" or "Confluence app successfully installed". By leveraging the Audit Log Webhook feature, you can build a custom solution to receive real-time notifications for such events.

Here is what I would work on:

• Set up a webhook in Atlassian Access:

  • Go to your organization settings in the Atlassian Admin Hub.
  • Enable an Audit Log Webhook to forward all audit log events to an endpoint of your choice.

• Create a custom webhook receiver:

  • Develop an endpoint using a language or framework you’re comfortable with (e.g., Node.js, Python, etc.).
  • Configure it to listen for incoming events from the webhook.

• Filter for relevant events:

  • The webhook payloads will contain details about various actions. You can filter for events like:
    • Jira app successfully installed
    • Confluence app successfully installed
  • Once identified, you can trigger a notification or log the event for review.

If you plan to explore on this, please let me know how it went. All the best!!

Kind Regards

Utkarsh

[Bill Sheboy]

Hi @Utkarsh Agarwal 

With the approach you described, one could use a Jira Automation rule with an Incoming Webhook Trigger, and then send the notification by email, Slack message, etc.: https://support.atlassian.com/cloud-automation/docs/jira-automation-triggers/#Incoming-webhook

And...I believe this approach will only work for paid license levels of Jira as the Security Audit Log (and global audit log) are not available for Free licenses.

Kind regards,
Bill

[Utkarsh Agarwal]

Using automations is a good option, however filtering to listen for specific events could become a challenge considering you have variety of logs.

Also Yes, this approach is specific for paid licenses as mentioned by @Philip Kroos - TEAM XALT they are on an Enterprise subscription.

[Philip Kroos - TEAM XALT]

Thank you for the hint, I will definitely use Jira Automations and webhooks to achieve this. I'm pretty sure that I can filter the specific event from the webhook response for the "Get an audit log of events" API endpoint and send a nicely formatted email like "user X installed app X on site www.example.atlassian.net".

Too bad this isn't a built in feature for Enterprise admins

[Utkarsh Agarwal]

If the suggestion works, would appreciate if you can accept the answer, it would help others :-)