confluence-audit-logs
Returns audit records of the given time range from Atlassian Confluence Cloud.
Syntax
confluence-audit-logs [profile=STRING] [duration=STRING] [from=DATETIME] [to=DATETIME] [page-size=INT] [slice-minutes=INT]
Options
- profile=STRING
- Optional. Confluence connect profile code. Separate multiple codes with commas. Queries all Confluence connect profiles you can use if omitted.
- duration=STRING
- Optional. Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example,
10mmeans data from 10 minutes earlier. Recent 1 day iffromanddurationare omitted. - from=DATETIME
- Optional. Start time of range.
yyyyMMddHHmmssformat. If you omit time part, it will be padded by zero. - to=DATETIME
- Optional. End time of range.
yyyyMMddHHmmssformat. If you omit time part, it will be padded by zero. (default: current time) - page-size=INT
- Optional. Maximum records returned per API request, 1 to 1000. (default: 1000)
- slice-minutes=INT
- Optional. Time range in minutes one API request covers, 1 to 1440. A longer period is split into ranges of this length. (default: 60)
Output fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Profile | Connect profile code used for the query. e.g. confluence_cloud |
| _time | Date | Time | Time the record was created |
| src_ip | IP address | Source IP | IP address that requested the action. e.g. 203.0.113.10 |
| category | String | Category | e.g. Permissions |
| event_name | String | Event name | e.g. Content restriction added |
| description | String | Description | Description of the record |
| user | String | Account | Account ID of the user who made the change. e.g. 712020:00000000-0000-4000-… |
| user_name | String | Name | Display name of the user who made the change. e.g. 홍길동 |
| object_type | String | Object type | e.g. User, Group |
| object_name | String | Object name | Name of the changed object |
| changes | List | Changes | Each element contains field_name, changed_from, changed_to |
| associated_items | List | Associated items | Pages, spaces, and other objects related to the action. Each element contains name, type |