監査ログ イベント
The auditing component of Bitbucket Data Center and Server will log many different events that occur when being used. Events have been assigned a coverage level to reflect the number and frequency of events that are logged – these levels can be used to control how much information is added to the audit log file. For example, if you have an instance under high load and no need for auditing in certain coverage areas, you may wish to turn audit logging off by selecting Off in the Audit log settings page. Learn more about these settings in View and configure the audit log.
Coverage levels available with both a Server and Data Center license:
- Off: Turns off logging events from this coverage area.
- Base: Logs low-frequency and some of the high-frequency core events from selected coverage areas.
Coverage levels where events are only available with a Data Center license:
- Advanced: Logs the core events as well as the low and medium frequency events from the coverage areas.
- Full: Logs all the events available in Base and Advanced, plus additional events for a comprehensive audit.
" アプリ" 適用領域に該当する Jira REST API を外部アプリが呼び出してイベントが生成された場合、それはアプリに依存するため、ここには記載されていません。
The following tables provide lists of new and legacy event summaries for all coverage levels and categories.
Global configuration and administration coverage area
Global administration category
| ベース | Base URL changed (BaseUrlChangedEvent) |
|---|---|
| Advanced | Announcement banner created (AnnouncementBannerCreatedEvent) |
| 大 | 利用可能な追加イベントなし |
Apps category
| ベース | Plugin disabled (PluginDisabledEvent) Plugin enabled (PluginEnabledEvent) Plugin uninstalled (PluginUninstalledEvent) Plugin upgraded (PluginUpgradedEvent) |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | Plugin container unavailable (PluginContainerUnavailableEvent) Plugin framework started (PluginFrameworkStartedEvent) Plugin module available (PluginModuleAvailableEvent) Plugin module disabled (PluginModuleDisabledEvent) Plugin module enabled (PluginModuleEnabledEvent) Plugin module unavailable (PluginModuleUnavailableEvent) |
Data pipeline category
| カバレッジ レベル | ログに記録されるイベント |
|---|---|
| ベース | 利用可能なイベントなし |
| Advanced | Full data export cancelled |
| 大 | 利用可能なイベントなし |
User management coverage area
Users and groups category
| ベース | GPG key added (GpgKeyCreatedEvent) GPG key deleted (GpgKeyDeletedEvent) Group added to user group (GroupMembershipsCreatedEvent) Personal access token changed (AccessTokenModifiedEvent) Personal access token created (AccessTokenCreatedEvent) Personal access token deleted (AccessTokenDeletedEvent) SSH access key created for personal key (SshKeyCreatedEvent) SSH access key deleted for personal key (SshKeyDeletedEvent) User added to user group ((GroupMembershipsCreatedEvent) User automatically created (AutoUserCreatedEvent) User automatically deleted from user group (AutoGroupMembershipDeletedEvent) User created (UserCreatedEvent) User created from directory sync (UserCreatedFromDirectorySynchronisationEvent) User deleted (UserDeletedEvent) User deleted from user group (GroupMembershipDeletedEvent) User directory created (DirectoryCreatedEvent) User directory deleted (DirectoryDeletedEvent) User erased (UserErasedEvent) User group automatically created (AutoGroupCreatedEvent) User group created (GroupCreatedEvent) User group deleted (GroupDeletedEvent) User group updated (GroupUpdatedEvent) User password changed UserCredentialUpdatedEvent) Username changed (UserRenamedEvent) |
|---|---|
| Advanced | User details export failed (UserExportFailedEvent, extraAttribute withPermissions=false) |
| 大 | 利用可能な追加イベントなし |
Permission coverage area
Permissions category
| ベース | Global permission change request (GlobalPermissionModificationRequestedEvent) |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | 利用可能な追加イベントなし |
Local configuration and administration coverage area
Personal category
| ベース | SSH key edited for personal key (SShKeyEditedEvent) |
|---|
Projects category
| ベース | All project default tasks deleted (DefaultTaskBulkDeletedEvent) |
|---|---|
| Advanced | Project pull request merge config deleted (ProjectPullRequestMergeConfigDeletedEvent) |
| 大 | 利用可能な追加イベントなし |
Repositories category
| ベース | Repository created (RepositoryCreatedEvent) |
|---|---|
| Advanced | Pull request reviewer group created (ReviewerGroupCreatedEvent) |
| 大 | 利用可能な追加イベントなし |
System category
| ベース | 利用可能な追加イベントなし |
|---|---|
| Advanced | SCM pull request merge config deleted (ScmPullRequestMergeConfigDeletedEvent) |
| 大 | 利用可能な追加イベントなし |
Security coverage area
Auditing category
| ベース | Audit log configuration updated |
|---|---|
| Advanced | 利用可能なイベントなし |
| 大 | 利用可能なイベントなし |
Authentication category
| ベース | 利用可能なイベントなし |
|---|---|
| Advanced | User logged out (LogoutSuccessEvent) |
| 大 | User logged in (AuthenticationSuccessEvent) User logged in (SSH) (SshAuthenticationSuccessEvent) |
Security category
| ベース | Secret detected (SecretDetectedEvent) |
|---|---|
| Advanced | Unauthorized access to a resource (AuthorizationFailureEvent) |
| 大 | 利用可能なイベントなし |
End user activity coverage area
Repositories category
| ベース | Repository accessed by user (RepositoryAccessedEvent) Run build (AnalyticsActionRunEvent) |
|---|---|
| Advanced | Branch created (BranchCreatedEvent) |
| 大 | Changes pushed to repository (RepositoryPushEvent) Changes read from repository (RepositoryOtherReadEvent) Git hook activity (RepositoryHookEvent) Repository cloned (RepositoryCloneEvent) Repository pulled (RepositoryPullEvent) Repository written to (RepositoryOtherWriteEvent) |
Pull requests category
| ベース | Auto merge failed (AutomaticMergeStoppedEvent) Auto merge succeeded (AutomaticMergeSucceededEvent) Pull request approved by participant (PullRequestParticipantApprovedEvent) Pull request declined (PullRequestDeclinedEvent) Pull request deleted (PullRequestDeletedEvent) Pull request merged (PullRequestMergedEvent) Pull request open request (PullRequestOpenRequestedEvent) Pull request opened (PullRequestOpenedEvent) Pull request participants changed (PullRequestParticipantsUpdatedEvent) Pull request reopened (PullRequestReopenedEvent) Pull request reviewed by participant (PullRequestParticipantReviewedEvent) Pull request reviewers changed (PullRequestReviewersUpdatedEvent) Pull request unapproved by participant (PullRequestParticipantUnapprovedEvent) |
|---|---|
| Advanced | Pull request filters used (PullRequestFilterEvent) |
| 大 | Pull request comment changed (PullRequestCommentEditedEvent) |
Search category
| ベース | 利用可能なイベントなし |
|---|---|
| Advanced | 利用可能なイベントなし |
| 大 | Code search succeeded (CodeSearchSuccessfulEvent) |
Apps category
This category is for auditing events generated by third-party apps.
Bitbucket Server customers can set the configuration property audit.legacy.events.logging.forced=true to move the following events from Full to Base level:
- Plugin container unavailable, Plugin module disabled, Plugin module enabled, Plugin module available, Plugin framework started
- User log in failed, User logged in, User logged in (SSH)
- Repository read event, Repository write event, Repository pull event, Repository push event, Git hook activity, Repository cloned
Note that adding these events to Base can significantly increase the size of the audit log.