Audit Log

itetable of contents

1 Display the audit log screen
2 Download product audit logs
3 Register your organization's API key
4 Download organization audit logs
5 Change audit log storage to user-provided S3

The Administration Center provides useful functions to help manage the usage status and security of organizations and products. This section describes basic operations related to audit logs. In Atlassian Cloud, organization and product audit logs are stored for 180 days and can be downloaded by organization administrators and product administrators, but users want to keep them indefinitely. I want to store it in the storage provided by the user. There are many requests. With this feature, audit logs are kept in storage indefinitely and can be downloaded by users at any time.

Display the audit log screen

The Product Audit Log screen is available to Atlassian site administrators.

Select “Audit Log” on Home screen
The audit log screen is displayed.

Download product audit logs

Product audit log downloads are available to Atlassian site administrators.

Please note that it may take some time for all product audit logs to be downloaded after https://rs-support-doc.atlassian.net/wiki/pages/createpage.action?spaceKey=DACCEL&title=App%20installation%20%282%29&linkCreation=true&fromPageId=681115649 .

In the Jira Audit Logs and Confluence Audit Logs section of Product Audit Logs, select "Recent", "Time Range" or "All" and click the "Download" button. A download link will be emailed to you.
Check the sent email and click the "Audit Log Download Link". Product audit logs can be downloaded.

Register your organization's API key

To download the organization audit log, the organization administrator needs to create and set the organization's API key.

Register your organization's API key by clicking the "Add" button in the Organization Audit Logs section. Please refer to Manage organizations for API key registration.

Download organization audit logs

Organizational audit log downloads are available to Atlassian product administrators.

Please note that it may take some time to download all organization audit logs after Register your organization's API key

In the organization audit log section, select a period from "Recent", "Specified Period", or "All" and click the "Download" button. A download link will be emailed to you.
Check the sent email and click the "Audit Log Download Link". You can download the organization audit log.

Change audit log storage to user-provided S3

Organization or product audit logs are stored in S3 prepared by D-Accel by default, but you can change to S3 prepared individually by the user by setting here. Please prepare the following 3 points in advance for setting.

Prepare S3 bucket access information (S3 region, S3 bucket name, access key ID, secret access key).
Grant s3:GetObject, s3:PutObject, s3:ListBucket, s3:GetBucketLocation, s3:ListAllMyBuckets permissions to the bucket in the S3 bucket policy.
Allow D-Accel's IP address in the S3 bucket policy. Please contact us from here for the IP address. You can use the app by adding the IP address of D-Accel.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject"
            ],
            "Resource": "arn:aws:s3:::xxx-xxx-xxx-xxx/*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetBucketLocation"
            ],
            "Resource": "arn:aws:s3:::xxx-xxx-xxx-xxx"
        },
        {
            "Sid": "VisualEditor2",
            "Effect": "Allow",
            "Action": "s3:ListAllMyBuckets",
            "Resource": "*"
        }
    ]
}

Select "Audit log storage settings" from the setting icon on the upper right of the screen.
Click to turn on "Use custom buckets" in the organization or product audit log panel.
Enter the user-prepared S3 region, S3 bucket name, access key ID, and secret access key, and click Test Connection. Click the Save button when the connection is successful.
After saving, you can return to the S3 prepared by D-Accel as the storage location by clicking "Use custom bucket" again to turn it off.