Error when loading the audit log in crowd

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Problem

Viewing the audit log fails with the message:

"Error when loading the audit log. See error logs for details.".

The following appears in the crowd-atlassian.log

1 2018-11-22 16:14:21,669 http-nio-8095-exec-6 WARN [common.security.jersey.XsrfResourceFilter] Additional XSRF checks failed for request: http://example.com/crowd/rest/admin/latest/auditlog/query , origin: https://example.com , referrer: https://example.com/crowd/console/secure/auditlog/browse.action , credentials in request: true , allowed via CORS: false

Cause

The logs are reporting an XSRF (Cross Site Request Forgery) warning, which is generally logged when the request's origin does not match its target.

More information available from this documentation:

Resolution

  1. Make sure you access Crowd using the exact base URL of the Crowd instance.

  2. If you have a reverse proxy in front of Crowd, please ensure your server.xml file contains the correct proxyName, proxyPort, and scheme parameters in your connector.

Updated on April 8, 2025

Still need help?

The Atlassian Community is here for you.