Overview

Atlassian is a software company that develops products for software developers, project managers and other software development teams.
Integrating your Atlassian logs to the Hunters ecosystem will allow storing the data in a parsed format and getting audit logs from Atlassian in your environment.

Supported Data Types

  • Jira Audit Logs - this data type represents audits that record activities undertaken in Jira.

  • Confluence Audit Logs - this data type represents audits that record activities undertaken in Confluence, and contains information about events like space exports, group membership changes, app installations, etc.

Sending Data to Hunters

To enable Hunters collection of Atlassian logs for your tenant, you will need to provide Hunters Domain, User (Administer required) and an API key, as you can see in the credentials sample below.
Alternately , you can collect the Atlassian logs from your network to a shared Storage Service (e.g. to an S3 bucket or Azure Blob Storage) shared with Hunters.

The expected format of the logs is the json format as exported by Atlassian. It is recommended to log the full schema, however any subset of the fields can be ingested given you are providing your specific schema to Hunters.

Atlassian API credentials sample

‘domain’: ‘https://<your_domain>.atlassian.net’,
'mail': ‘user_mail’,
"api_token": ********* (this should be the API token related to the user)

Atlassian data sample
  • Jira:

    {"id": 1, "summary": "User updated", "created": "2022-08-03:00:00.000+0000", "category": "user management", "eventSource": "", "objectItem": {"id": "abc123", "name": "def456", "typeName": "USER", "parentId": "2", "parentName": "IDP Directory"}, "changedValues": [{"fieldName": "Active / Inactive", "changedFrom": "Active", "changedTo": "Inactive"}], "associatedItems": [{"id": "abc123", "name": "def456", "typeName": "USER", "parentId": "2", "parentName": "IDP Directory"}]}
    CODE
  • Confluence:

    {"author": {"type": "user", "displayName": "Name", "operations": null, "isExternalCollaborator": false, "accountType": "", "publicName": "user", "externalCollaborator": false}, "remoteAddress": "", "creationDate": 1661412506867, "summary": "User deleted", "description": "", "category": "Users and groups", "sysAdmin": false, "superAdmin": false, "affectedObject": {"name": "Name (Unlicensed)", "objectType": "User"}, "changedValues": [], "associatedObjects": []}
    CODE