Can I view a deleted issue and see who did it in Jira Software?

[Ana Magaly Reyes]

Can I view a deleted issue and see who did it in Jira Software? 

[Aaron Pavez _ServiceRocket_ · Accepted solution]

Hi @Ana Magaly Reyes 

Depends on your instance. is it Datacenter or Cloud?

Cloud doesn't log the Jira issue delete. More information can be found here:

https://community.atlassian.com/t5/Jira-Software-questions/I-would-like-to-know-who-deleted-issues-in-this-JIRA-project/qaq-p/1637238

Jira Datacenter can log those events. Check the audit logs.

For Cloud is better to either:

- Disable the DELETE Jira issue permissions

- If you need to DELETE(Which is wrong in every way), you can create an automation to log that in the audit log(this is also mentioned in the link)

Regards

Aaron

[Nic Brough -Adaptavist-]

You can't view what is not there any more.

DC logs deletes in the audit log, as Aaron says, but it only logs the key and the person who did it.

Delete really does mean delete - there's nothing there any more.

Aaron recommends removing delete permissions from Cloud.  That is highly recommended for DC as well.

[Ana Magaly Reyes]

Thanks Aaron and Nic

[Yuliia_Borivets__SaaSJet_ · Accepted solution]

Hi @Ana Magaly Reyes 

The things you can do to prevent losing deleted issues in the future:

- Disable permission for the regular users and allow it to admins only.

- Back up your projects. 

- Get the app from the Atlassian Marketplace. 

How to store deleted issues in Jira? (Part 2)

[Nicolás Guzmán]

Atlassian recently released the functionality to view the log of users who delete issues. I recommend checking out my post:

https://community.atlassian.com/forums/Jira-questions/Track-deleted-Issues-in-Jira-cloud-See-who-deleted-an-Issue-and/qaq-p/2970762#M1111673

[Mehmet A _Bloompeak_]

Hi @Ana Magaly Reyes

By default, Jira does not track deleted issues and deleted issues are lost forever. To prevent it happening again, you can try Restore Deleted Issues app developed by our team. In order for this app to work, the app must have been installed before the issue is deleted.

After you install this app,

• Both bulk and single issue deletions are logged.
• You can see when and by whom issues are deleted.
• You can recover summary, description, comments except attachments.

Below you can find an article about tracking and restoring deleted issues in Jira.

How to Track and Restore Your Deleted Issues in Jira

Hope it helps.

[Vish Reddy {Revyz}]

Hi @Ana Magaly Reyes 

As others on this thread have highlighted once you delete an issue in the cloud it is gone forever and there is no audit log.

How to mitigate this risk depends on your organizations risk tolerance.

Options at hand (of course there is no perfect solution):

• Apply the principle of providing the least privileges to the users / admins
  • This of course would mean some projects are messy
  • In today's world of SaaS account takeovers & other emerging cyber threats this does not solve the problem
    • A cyber criminal can takeover the site admins account and create havoc
• Backup up your data and make sure you can restore it back in a granular manner
  • You can Do it Yourself or get a third party app to automate that functionality
  • DIY - free, but on going maintenance
  • Third party apps - There is a cost associated
    • There are two flavors of third party apps:
      • Only captures deleted issues via webhooks - attachment data is missed
      • Full backup includes issues, attachments, config etc...
    • Check if your compliance requirements are met by the app, as an example:
      • Data Residency
      • SOC II / ISO 27001
      • Data Encryption - How is it done

I am part of Revyz and we help Atlassian Cloud customers with their Data Management needs which includes:

- Backup & Restore

- Configuration Management

- Admin focussed Analytics

- Site Optimization

If you are using JSM Assets you have a similar issue at hand for when Asset Objects get deleted. While you plan out your strategy for data resilience, ensure that you are thinking of strategy holistically and your solution is scalable (what ever it may be).

Thanks

Vish

[Nic Brough -Adaptavist-]

Like all the other options Reyvz can only pick up deleted data from the time you install it.

But if you really want to let your people delete issues without checks, it is a very good option for avoiding the data loss - it makes the backup and restore a doddle, and, of course, tells you who deleted what.