topic Re: Integrating and Ingesting Atlassian Audit Logs into Splunk in Getting Data In

Integrating and Ingesting Atlassian Audit Logs into Splunk?

anandhalagaras1 — Thu, 12 Jan 2023 16:26:38 GMT

Based on the article provided below we have updated our Atlassian settings to pull the Bitbucket logs into our Audit Logs hence we want to how can get them ingested into Splunk.

So do we any specific add-on to get this audit logs pulled and ingested into Splunk? Or how do we get them integrated and get them ingested into Splunk.

Article:

https://bitbucket.org/blog/bitbucket-audit-logs-are-now-available-in-atlassian-access

https://support.atlassian.com/security-and-access-policies/docs/track-organization-activities-from-the-audit-log/

So can anyone help me on this requirement.

Re: Integrating and Ingesting Atlassian Audit Logs into Splunk

anandhalagaras1 — Wed, 11 Jan 2023 12:39:23 GMT

Can anyone help on this requirement? Can we able to pull the logs using HTTP Event Collector method?

Kindly check and update.

Re: Integrating and Ingesting Atlassian Audit Logs into Splunk

anandhalagaras1 — Fri, 20 Jan 2023 06:33:55 GMT

Can anyone help on the requirement. On how to pull the Audit logs into Splunk.

Link from Atlassian for reference:

https://developer.atlassian.com/cloud/admin/organization/rest/api-group-events/

Re: Integrating and Ingesting Atlassian Audit Logs into Splunk?

Brett — Fri, 24 May 2024 09:46:13 GMT

I just built an app to do this: https://splunkbase.splunk.com/app/7371

Re: Integrating and Ingesting Atlassian Audit Logs into Splunk?

BrianH — Wed, 16 Apr 2025 17:38:46 GMT

Brett - do you have any further guidance on making this app (7371) work? We are trying to ingest Atlassian logs from a trusted partner to our Splunk. They pointed us to APP 7371, we installed. But don't see any options for configuration? Not like we're used to with other apps, anyway. No "input" tab, no "configuration" tab, no "proxy" tab. We get one page with 'name', 'update checking', 'visible' and 'upload asset' . nothing else. no place to enter the API key they sent us, nowhere to enter file path. Nothing. At this point we have the app installed but no idea how to get the logs to come over.