Determine who seen (or exported) issues or downloaded attachments

[Francesco Borchetta]

Hi All,

we need to be able to pull a report that indicates who seen (or exported) one or more JIRA issues as well as who downloaded a JIRA attachment.

Is it possible that the log file (atlassian-jira-*.log) show these information?

Alternatively, is there a plugin or functionality that we can use to capture this information?


Thanks in advance!
Francesco

[Knut Arne]

Hi,

Jira got the function for capturing this data out-of-the-box - you just have to enable it.

You can enable HTTP Access Logging in the System settings -> Logging and Profiling.
This will generate a log-file named 'atlassian-jira-http-access.log' that contains all requests to a resource.
With this you can see which user that have requested a issue and attachments etc.

Example of log in logfile where user "TESTUSER" have requested a attachment "textfile.txt" on the issue "TEST1-29", (note: data have been anonymized):

0:0:0:0:0:0:0:1 o111x11111x1 TESTUSER [02/Apr/2018:10:20:39 +0200] "GET https://jira.example.com/secure/attachment/10238/textfile.txt HTTP/1.1" 200 4 0.0190 "https://jira.example.com/browse/TEST1-29" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" "99test1" 

Hopefully this will help you with the capture of data part, and you can parse this into a report.

Hope this helps.

--Knut Arne

[Aron Gombas _Midori_]

Knut, this approach can capture the basic uses, that's true, but I am afraid it will not capture anything that is more complicated than those.

For example, if someone runs a JQL, then exports its result set to CSV, then this is really not trivial what info he got access to. For that, you would need to re-run the query in that very moment using the very same access control, columns, etc.

Not easy.

[Alexey Matveev]

It is not possible out of the box. And I ve never seen such a plugin. But it is possible to write such a plugin.