比較バージョン

キー

  • この行は追加されました。
  • この行は削除されました。
  • 書式設定が変更されました。

...

The Administration Center provides useful functions to help manage the usage status and security of organizations and products. This section describes basic operations related to audit logs. In Atlassian Cloud, organization and product audit logs are stored for 180 days and can be downloaded by organization administrators and product administrators, but users want to keep them indefinitely. I want to store it in the storage provided by the user. There are many requests. With this feature, audit logs are kept in storage indefinitely and can be downloaded by users at any time.

Display the audit log screen

The Product Audit Log screen is available to Atlassian site administrators.

  1. Select "Admin Center" on the home screen.

    Image Removed

    Select “Audit Log” in the admin center.

    Image Removed

    “Audit Log” on Home screen

    image-20240305-061215.pngImage Added

  2. The audit log screen is displayed.

Download product audit logs

Product audit log downloads are available to Atlassian site administrators.

...

  1. In the Jira Audit Logs and Confluence Audit Logs section of Product Audit Logs, select "Recent", "Time Range" or "All" and click the "Download" button. A download link will be emailed to you.

  2. Check the sent email and click the "Audit Log Download Link". Product audit logs can be downloaded.

Register your organization's API key

To download the organization audit log, the organization administrator needs to create and set the organization's API key.

  1. Register your organization's API key by clicking the "Add" button in the Organization Audit Logs section. Please refer to Manage organizations for API key registration.

Download organization audit logs

Organizational audit log downloads are available to Atlassian product administrators.

...

  1. In the organization audit log section, select a period from "Recent", "Specified Period", or "All" and click the "Download" button. A download link will be emailed to you.

  2. Check the sent email and click the "Audit Log Download Link". You can download the organization audit log.

Change audit log storage to user-provided S3

Organization or product audit logs are stored in S3 prepared by D-Accel by default. This can be changed , but you can change to S3 prepared individually by the user by setting here. Please prepare the following 3 points in advance for setting.

情報
  1. Prepare S3 bucket access information (S3 region, S3 bucket name, access key ID, secret access key).

  2. Grant s3:GetObject, s3:PutObject, s3:ListBucket, s3:GetBucketLocation, s3:ListAllMyBuckets permissions to the bucket in the S3 bucket policy.

  3. Allow D-Accel's IP address in the S3 bucket policy. Please contact us from here for the IP address. You can use the app by adding the IP address of D-Accel.

展開
title例) S3バケットのポリシー
コード ブロック
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject"
            ],
            "Resource": "arn:aws:s3:::xxx-xxx-xxx-xxx/*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetBucketLocation"
            ],
            "Resource": "arn:aws:s3:::xxx-xxx-xxx-xxx"
        },
        {
            "Sid": "VisualEditor2",
            "Effect": "Allow",
            "Action": "s3:ListAllMyBuckets",
            "Resource": "*"
        }
    ]
}
  1. Select "Audit log storage settings" from the setting icon on the upper right of the screen.

  2. Click to turn on "Use custom buckets" in the organization or product audit log panel.

  3. Enter the user-prepared S3 region, S3 bucket name, access key ID, and secret access key, and click Test Connection. Click the Save button when the connection is successful.

  4. After saving, you can return to the S3 prepared by D-Accel as the storage location by clicking "Use custom bucket" again to turn it off.