Automation Audit Log REST API

[Jerel Crosland]

We have Jira Data Center with JSM, and I am a project admin, not a site admin.

We need a way to get the Automation Audit Log out to put into a dashboard, using a tool like Power BI. I assumed this would be via the REST API, but I can't find any documentation related to THIS audit log, not the main Jira audit log. Can anyone recommend a way to get that data out of Jira, other than RPA screen-scraping?

[Darryl Lee · Accepted solution]

Hi @Jerel Crosland 

I found undocumented API endpoints to get usage data out of Cloud. Have never looked for Audit Logs... Let's see...

Ah, here we go:

After I went to https://YOURSITE/secure/AutomationGlobalAdminAction!default.jspa#/audit-log

And sniffed around in Chrome's Developer Panel. Found this:

https://YOURSITE/rest/cb-automation/latest/audit/GLOBAL?limit=50&offset=0

I'm not sure what the upper limit is, but I've gotta head to breakfast soon. Give it a try and let us know!

[Jerel Crosland]

Thank you, I will take a look. That second URL looks like the main Jira audit log info, but I'll look into it.

I was told by someone else that, because Automation for Jira used to be a separate add-on, all they did was bundle it in, but it's still, under the covers, an add-on, and they haven't made it part of the usual REST API. I'm hoping that's not true.

[Jerel Crosland]

I should have replied sooner. That worked partially, but the results are missing a key element. The results do not include the actual activity performed. You get the ID of the rule being executed, the date and time, but you don't get any details about what was actually done. Maybe that's why they aren't publishing it. It's incomplete. Knowing Atlassian, they will most likely never address this, which makes automation useless in a regulated environment, such as might be found at a bank for example.

[Darryl Lee]

Hrm. So the first URL changed:

https://YOURSITE.atlassian.net/jira/settings/automation#/tab/audit-log?page=1

As did the second one:

https://YOURSITE.atlassian.net/gateway/api/automation/internal-api/jira/CLOUDID/pro/rest/GLOBAL/auditlog?offset=0&limit=50

(Cloud ID can be obtained here: https://YOURSITE.atlassian.net/_edge/tenant_info per What is my cloud id)

But to your point, you're 100% correct in that the audit log doesn't show activity performed. I don't think that's the point of this API. It does show outcomes: SUCCESS or NO_ACTIONS_PERFORMED, and even associated Issue IDs (which is more than you get in the UI).

If you want the "content" of each audit item, it turns out that's a _different_ API call:

https://YOURSITE.atlassian.net/gateway/api/automation/internal-api/jira/CLOUDID/pro/rest/GLOBAL/auditlog/item/AUDITITEMID

For me that returned a LOT of specific data about the trigger that kicked off the rule, actions performed, conditions, etc.

Again, I'm testing on CLOUD, so these endpoints could be totally different/nonexistent on Data Center. 

But you ought to be able to dig them out with a little Developer Panel sleuthing. If you happen to be coming to Team 25, I may do a little demo of this: https://a.e180.co/l/nKjU2a/