Which users are running scripts via REST API ?

[Predrag Stojanovic]

Hi,

How can we find out how a user can access JIRA? We are trying to find out if a user is accessing JIRA via REST API calls or over a browser. The idea is to possibly identify unwanted running scripts.

[Nic Brough -Adaptavist- · Accepted solution]

You're going to struggle, even with log analysers - Jira uses REST calls internally, so you're going to find users issuing REST calls as part of their browsing.

[NotTheRealStephenSifersNOPENOPENOPENOPE]

You should be able to run the HTTP request log analyzer:

https://confluence.atlassian.com/enterprise/jira-http-requests-log-analyzer-461504620.html

Output categories include REST_API HTTP calls.

[Jelena Radovanovic]

We tried to analyze access.logs, however there are too big and too complicated.