Atlassian Audit Logs

Before you begin:

• Only users with organization admin privileges can generate org-level API keys and retrieve the Organization ID. This is included for all Atlassian products.

• The following credentials are required as deliverables.

• This integration collects audit log events across all Atlassian products in your organization: Jira, Confluence, Bitbucket, Atlassian Guard Detect, and Loom.

• You can onboard with a single product, and the integration will pick up the new products when permissions get added on.

---

Step 1: Find your Organization ID

1. Log in to the Atlassian Admin Console

   • Go to https://admin.atlassian.com.

   • Sign in with your organization admin account.

2. Locate your Organization ID

   • After logging in, select your organization from the list.

   • The Organization ID appears in the browser URL: https://admin.atlassian.com/o/<your_org_id>/... Copy the value between /o/ and the next /.

---

Step 2: Generate an Org-Level API Key

1. Navigate to API Keys

   • From the Atlassian Admin Console (admin.atlassian.com), go to Settings → API keys.

2. Create a new API key

   • Click Create API key.

   • Enter a descriptive name (e.g., "ThreatDefence Audit Logs").

   • Add the read:events:admin scope to the API key.

   • Set an expiry date — note this date, as the key will need to be rotated before it expires.

   • Click Create and then Copy the API key immediately — it will not be shown again.

Important: This is an organization-level API key (not a personal API token).

It is generated under Settings → API keys in the Atlassian Admin Console, not under your personal Atlassian profile.

---

Onboarding the integration

Please follow the Managing Integrations instructions and onboard the integration. The above saved credentailas are required in this process.

If encountered difficulties with onboarding, please email the following credentials to [e-mail]

• Organization ID

• API Key