Audit log for any delete action

[Deleted user]

as system admin of jira software, I can see audit log displaying project level deletion, so wonder where to find audit log for deleting -

1. issue
2. comment
3. work log
4. history
5. user

[Nic Brough -Adaptavist- · Accepted solution]

For issues and users, it's in the same place.  Comments and work-logs are not audited (so there's a very strong recommendation that you don't allow delete).  You can't delete history, without deleting the whole issue.

[Vassilis Manolas]

Hi there! Are you sure that this is valid for the Deletion of Jira Issue?

I am trying this on the cloud version and, although the Activities filter is present, no log is tracked for this activity.

Thank you in advance!

[Vish Reddy {Revyz}]

Hi @Vassilis Manolas 

Jira issue deletions are not recorded in the audit log. Any issue deletion is immediate and the action is not logged :-(

I am curious to hear what problem are you trying to address?

From a risk mitigation perspective, you can partially mitigate the risk of data loss by removing delete permissions for users, project admins etc.. of course the trade-off here is usability, but removing delete permissions is not a silver bullet i.e. does not solve all threat vectors.

Account takeovers are quite common now days, but not many talk about it - have a look at what happened to Cloudflare in the article below. No matter how you tighten up your permissions, once the admin's account is taken over, the attacker be it an insider or an outsider will create havoc :-( 

https://blog.cloudflare.com/thanksgiving-2023-security-incident

https://www.bleepingcomputer.com/news/security/cloudflare-hacked-using-auth-tokens-stolen-in-okta-attack/

[Vassilis Manolas]

Hi Vish!

Thank you for your response!

Did remove the delete permissions. Had to do it, as we did not manage to find out who deleted an issue that was not meant to be deleted.

I commented below Nic's reply, due to the fact that

- the initial question here was:

as system admin of jira software, I can see audit log displaying project level deletion, so wonder where to find audit log for deleting -

1. issue

- and Nic's response was:

For issues and users, it's in the same place.

So I was hoping he was talking about the logs of deleting the issue. Unfortunately, as it seems, this is not true.

Jira issue deletions are not recorded in the audit log. Any issue deletion is immediate and the action is not logged :-(

Thank you for taking the time to reply to me though!

[Joe Pitt · Accepted solution]

Be mindful. You can look at the log, but you can't recover anything.