Configuration Guide
Table of contents
After installation, you will see User Activity Audit Log in the "Apps" administration menu:
Initially, only site- and org-admins can access the app. User access can be defined in Permissions.
After clicking User Activity Audit Log, you will be navigated to the home page of the app:
After the expiration of the license, you will see the corresponding message and will not be able to use the app (The “generate activity log” button will be disabled):
If you access the app for the first time, you will be presented with a brief onboarding session, displaying the main features of the app. You can dismiss the session at any step.
If you have IP allowlisting enabled on your Cloud instance (this is possible Jira for Premium plans), please contact us for the IP to be added to the Cloud allowlist. Without this, some actions will not be logged.
The app configuration setting can be accessed by clicking the “Setting“ in the top right corner of the app:
You can configure the following settings in the app:
Webhooks
You can use app webhooks to receive real-time updates for all the actions registered in the app. To do so, go to Settings (top right corner of the app) and click “Webhooks“ in the left menu.
To add a webhook endpoint URL, enter the URL in the “URL“ field and click Save:
Make sure the added endpoint accepts POST requests from https://auditlog.twinit.ge domain!
The URL will be added to the list on the right:
After adding more than 10 endpoints, pagination will appear with 10 endpoints on every page.
From here you can add more endpoints, or
Modify the existing one (you can edit URL)
Mute the URL (a confirmation screen will be shown and if confirmed the API will be paused and will not receive the action data):
Unmute the muted URL (a confirmation screen will be shown and if confirmed the API will activate and will again receive the action data):
Delete the webhook:
JSON format
{
"accountId": "ACTOR_ACCOUNT_ID",
"accountName": "ACTOR_DISPLAY_NAME",
"avatar": "ACTOR_AVATAR",
"instanceName": "EVENT_INSTANCE_ADDRESS",
"issueKey": "ISSUE_KEY",
"requestTypeName": "REQUEST_TYPE_NAME",
"issueTypeName": "ISSUE_TYPE_NAME",
"actionType": "OCCURRED_ACTION",
"target": "EVENT_TYPE",
"projectKey": "PROJECT_KEY",
"projectName": "PROJECT_NAME",
"changedFrom": "OLD VALUE",
"changedTo": "NEW VALUE",
"createdAt": "EVENT_DATE",
"objectId": "COMMON_OBJECT_ID",
"summary": "ISSUE_SUMMARY"
}
Configuring Atlassian Guard (formerly Access) connection
If Atlassian Guard (formerly Access) is activated on your Cloud instance, you can retrieve three additional user actions:
User reactivated
User deactivated
User last active (Date/time)
User removed from site
User invited to site
User detail changed
To be able to view these actions, you need to configure a connection with Atlassian Guard. To do so, go to Settings (top right corner of the app) and click “Organization audit log“ in the left menu.
Enter two values in the corresponding fields:
Organization ID
API Key
To create/view both values, follow the instructions and click Connect. If the values are correct, you will see the success message, otherwise, a status/error notification will be displayed:
Configuring Jira Administration Audit Log connection
Connection with the Jira Administration Audit log is required for logging the following Actions:
Issue resolved
Status changed
Project role created
Project role updated
Project role deleted
Project category changed
Permission scheme created
Permission scheme copied
Permission scheme deleted
Permission scheme updated
Permission added
Permission deleted
Global permission added
Global permission deleted
Customer permissions changed
Agent Portal Announcement Update Permission
Permission scheme added to project
Project roles changed
JIRA Service Desk configuration
Login-free portal settings changed
Public signup enabled
Public signup disabled
Requirement for email verification for signup changed
Help center permissions changed
Help center updated
Issue view
To connect the app to the Jira Administration Log, go to Settings (top right corner of the app) and click “Administration audit log“ in the left menu:
Enter an email of the user with valid Jira administrator permission and an API Token for the same user and click connect. Initially, the status of the connection will be Pending:
Click “Refresh status“ to update the status of the connection. If the connection is successful, you will see the corresponding status (refreshing status may take several seconds, click again if the status is not updated):
If the connection is successful, you will see the corresponding status and the error message:
You can delete the connection by clicking the “Delete connection” button while editing the connection and clicking the “Delete” button in the confirmation popup:
Configuring Assets Connection
The app includes action logs made on Assets (formerly Insight), namely object created and object updated.
To enable displaying the asset-related actions, go to Settings (top right corner of the app) and click “Assets audit log“ in the left menu:
The configuration consists of several fields to be filled:
Email
Fill in the email related to the Atlassian account (valid JSM agent) that will be used to access the data in the Assets.
Workspace ID
Fill in the ID of the Assets (Insight) workspace you want to configure backup for. The Workspace ID can be found on the following link: https://[yourcloud].atlassian.net/rest/servicedeskapi/insight/workspace. The Jira Service Management REST API uses the workspace Id to identify your individual instance of Assets (Insight), it is an alphanumeric string at the end of the text shown on the opened link with the following sample appearance:
3b3b70g5-66f8-3c01-a2d7-e5bbf2584dc3
:{"size":1,"start":0,"limit":50,"isLastPage":true,"_links":{"self":"https://[yourcloud].atlassian.net/rest/servicedeskapi/assets/workspace","base":"https://[yourcloud].atlassian.net","context":""},"values":[{"workspaceId":"3b3b70g5-66f8-3c01-a2d7-e5bbf2584dc3"}]}
API Token
Atlassian API token secures account access to the API. You can create a token, through the following URL: Atlassian account - API Tokens. You can read more about Atlassian API Token on the documentation page: Manage API tokens for your Atlassian account | Atlassian Support.
After creating an API Token, just copy and paste it into the corresponding “API Token“ field on the configuration page.
After filling in the three fields, click “Connect“ button. After Sync starts, the Pending Connection status“ message will be displayed. If the connection is successful, you will see the corresponding message, indicating also the last successful sync date/time:
If there is an error in the filled fields, you will see the corresponding error message:
You can also disable the connection to Assets by clicking the Delete connection button while editing the connection:
Configuring Fields Monitoring
From here you can manage the fields, modification of which you want to log and track. For the instructions about how to view the actions on the selected fields, please visit User Guide.
After installation of the app, the fields list will be empty, meaning no fields are monitored:
To add the fields in the list of the monitored field, search and select them in the Add fields dropdown field (you can select several fields simultaneously):
After the fields are selected, click the ”Save” button and the selected fields will appear in the list under “Manage Monitored fields“:
The list shows:
ID of the field
Name of the filled
Date when the field monitoring started
You can remove the field from the monitoring
After the field is added to monitoring, you can filter the actions by the selected fields and show them in the breakdown.
Historical Actions in the Logs
For all the actions it is possible to see the log starting from the installation of the plugin. However, for the issue- and asset-related actions, historical data, starting from January 1st of the previous year to the sync year, will be also available in the app. For example, if the historical log sync is started on September 5th, 2024, the logs will be synced from January 1st, 2023. To re
To sync the historical data, go to the “Settings / Historic log sync” and click “Sync historical logs”. After the first run, depending on the number of issues and Asset objects, retrieving historical data may take from minutes to hours.
To see the status of the historical data sync, go to Settings (top right corner of the app) and Historic log sync:
From here you can see the the following information:
App installation date
Historical log date
The earliest date from when the logged actions will be synced and displayed in the app cannot be earlier than January 1st, of the previous year.
“Sync historical logs” button to re-retrieve the historical data
After clicking the button you will see the confirmation popup and the status of the sync, while it is in progress.
After clicking “Confirm“, you can see the progress of the sync:
Last synced: Date and time when the historical log was last synced
List of the actions that can be synced:
Total: Number of the actions
The actions on the following components are not available in the historical data and only the actions done after the app installation will be visible:
Global feature enable/disable
Board
Sprint
Version
Users
Project category
Comment update old value
Issue deleted
Actions from Jira administration audit log
Jira organization audit log
Assets audit log
Issue view
Permissions
You can define user roles for the Jira users who can access the plugin. There are two roles available in the app:
Administrator: can access all the logs in the app + access Settings and configure the app.
Manager: can access all the logs in the app, and can access and configure only Monitor Fields in the Settings.
To define roles for certain users, go to Settings (top right corner of the app) and click “Permissions“ in the left menu:
To add a user to the app, search and select the user or group from the dropdown menu, you can search the user by name, email, or group and select the user from the list:
Define the role of the user and click Save:
After adding, the user will be added to the list:
For the users in the list, you can change the Role from the list itself:
To remove the user from the Permissions, click Remove button and Delete button on the confirmation popup:
You can search users in the list by name or filter the list by role.
When a user, who does not have the right to use the app, tries to access the logs, the corresponding message will be displayed: