Hi All,
we need to be able to pull a report that indicates who seen (or exported) one or more JIRA issues as well as who downloaded a JIRA attachment.
Is it possible that the log file (atlassian-jira-*.log) show these information?
Alternatively, is there a plugin or functionality that we can use to capture this information?
Thanks in advance!
Francesco
Hi,
Jira got the function for capturing this data out-of-the-box - you just have to enable it.
You can enable HTTP Access Logging in the System settings -> Logging and Profiling.
This will generate a log-file named 'atlassian-jira-http-access.log' that contains all requests to a resource.
With this you can see which user that have requested a issue and attachments etc.
Example of log in logfile where user "TESTUSER" have requested a attachment "textfile.txt" on the issue "TEST1-29", (note: data have been anonymized):
0:0:0:0:0:0:0:1 o111x11111x1 TESTUSER [02/Apr/2018:10:20:39 +0200] "GET https://jira.example.com/secure/attachment/10238/textfile.txt HTTP/1.1" 200 4 0.0190 "https://jira.example.com/browse/TEST1-29" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" "99test1"
Hopefully this will help you with the capture of data part, and you can parse this into a report.
Hope this helps.
--Knut Arne
Knut, this approach can capture the basic uses, that's true, but I am afraid it will not capture anything that is more complicated than those.
For example, if someone runs a JQL, then exports its result set to CSV, then this is really not trivial what info he got access to. For that, you would need to re-run the query in that very moment using the very same access control, columns, etc.
Not easy.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
It is not possible out of the box. And I ve never seen such a plugin. But it is possible to write such a plugin.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.