Bitbucket の監査ログ イベント
The auditing component of Bitbucket Server and Data Center will log many different events that occur when being used. Events have been assigned a coverage level to reflect the number and frequency of events that are logged – these levels can be used to control how much information is added to the audit log file. For example, if you have an instance under high load and no need for auditing in certain coverage areas, you may wish to turn audit logging off by selecting Off in the Audit log settings page. Learn more about these settings in Auditing in Bitbucket.
Coverage levels available with both a Server and Data Center license:
- Off: Turns off logging events from this coverage area.
- Base: Logs low-frequency and some of the high-frequency core events from selected coverage areas.
Coverage levels where events are only available with a Data Center license:
- Advanced: Logs the core events as well as the low and medium frequency events from the coverage areas.
- Full: Logs all the events available in Base and Advanced, plus additional events for a comprehensive audit.
The following tables provide lists of event summaries for all coverage levels and categories.
Global configuration and administration coverage area
Global administration category
| ベース | ApplicationSetupEvent BackupCanceledEvent BackupFailedEvent BackupStartedEvent BackupSucceededEvent BaseUrlChangedEvent DisplayNameChangedEvent ElasticsearchConfigurationChangeAuditEvent ElasticsearchFullSynchronisationAuditEvent ElasticsearchRepositorySynchronisationAuditEvent HttpScmHostingChangedEvent LicenseChangedEvent MailHostConfigurationChangedEvent MigrationCanceledEvent MigrationFailedEventMigrationStartedEvent MigrationSucceededEvent MirrorDisabledEvent MirrorEnabledEvent MirroringRequestRejectedEvent MirroringRequestAcceptedEvent MirroringRequestCreatedEvent MirrorInstalledEventMirrorUninstalledEvent ServerEmailAddressChangedEvent ServerTimeZoneChangedEvent TicketRejectedEvent |
|---|---|
| Advanced | DefaultRateLimitSettingsModifiedEvent RateLimitingEnabledEvent UserRateLimitSettingsCreatedEvent UserRateLimitSettingsDeletedEvent UserRateLimitSettingsModifiedEvent |
| 大 | 利用可能な追加イベントなし |
Apps category
| ベース | PluginDisabledEvent PluginEnabledEvent PluginUninstalledEvent PluginUpgradedEvent |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | PluginContainerUnavailableEvent PluginModuleDisabledEvent PluginModuleEnabledEvent PluginModuleAvailableEvent PluginModuleUnavailableEvent PluginFrameworkStartedEvent |
User management coverage area
Users and groups category
| ベース | AccessTokenCreatedEvent AccessTokenDeletedEvent AccessTokenModifiedEvent AutoGroupCreatedEvent AutoGroupMembershipDeletedEvent AutoUserCreatedEvent DirectoryCreatedEvent DirectoryDeletedEvent GpgKeyCreatedEvent GpgKeyDeletedEvent GroupCreatedEvent GroupDeletedEvent GroupMembershipDeletedEvent GroupMembershipsCreatedEvent UserCreatedEvent UserCreatedFromDirectorySynchronisationEvent UserCredentialUpdatedEvent UserDeletedEvent UserErasedEvent UserRenamedEvent |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | 利用可能な追加イベントなし |
Permission coverage area
Permissions category
| ベース | GlobalPermissionGrantedEvent GlobalPermissionGrantRequestedEvent GlobalPermissionModificationRequestedEvent GlobalPermissionModifiedEvent GlobalPermissionRevocationRequestedEvent GlobalPermissionRevokedEvent ProjectPermissionGrantedEvent ProjectPermissionGrantRequestedEvent ProjectPermissionModificationRequestedEvent ProjectPermissionModifiedEvent ProjectPermissionRevocationRequestedEvent ProjectPermissionRevokedEvent RepositoryPermissionGrantedEvent RepositoryPermissionGrantRequestedEvent RepositoryPermissionModificationRequestedEvent RepositoryPermissionModifiedEvent RepositoryPermissionRevocationRequestedEvent RepositoryPermissionRevokedEvent |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | 利用可能な追加イベントなし |
Local configuration and administration coverage area
Projects category
| ベース | AutoMergeConfigUpdatedEvent BranchModelConfigurationCreatedEvent BranchModelConfigurationDeletedEvent BranchModelConfigurationUpdatedEvent HookScriptConfigurationRemovedEvent HookScriptConfigurationSetEvent HookScriptCreatedEvent HookScriptDeletedEvent HookScriptsDeletedByPluginKeyEvent HookScriptUpdatedEvent ProjectAvatarUpdatedEvent ProjectCreatedEvent ProjectCreationRequestedEvent ProjectDeletedEvent ProjectDeletionRequestedEvent ProjectImportedEvent ProjectModifiedEvent PullRequestConditionCreatedEvent PullRequestConditionDeletedEvent PullRequestConditionUpdatedEvent RefRestrictionAddedEvent RefRestrictionDeletedEvent RefRestrictionUpdatedEvent SshAccessKeyGrantedEvent SshAccessKeyRevokedEvent |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | 利用可能な追加イベントなし |
Repositories category
| ベース | InternalWebhookCreatedEvent InternalWebhookDeletedEvent InternalWebhookModifiedEvent RepositoryCreatedEvent RepositoryCreationFailedEvent RepositoryDefaultBranchModifiedEvent RepositoryDeletedEvent RepositoryDeletionRequestedEvent RepositoryForkedEvent RepositoryForkFailedEvent RepositoryHookDeletedEvent RepositoryHookDisabledEvent RepositoryHookEnabledEvent RepositoryHookSettingsChangedEvent RepositoryImportedEvent RepositoryModificationRequestedEvent RepositoryModifiedEvent |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | 利用可能な追加イベントなし |
Security coverage area
Auditing category
| ベース | 利用可能なイベントなし |
|---|---|
| Advanced | 利用可能なイベントなし |
| 大 | 利用可能なイベントなし |
Authentication category
| ベース | 利用可能なイベントなし |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | AuthenticationFailureEvent AuthenticationSuccessEvent SshAuthenticationSuccessEvent |
End user activity coverage area
Repositories category
| ベース | RepositoryAccessedEvent |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | RepositoryOtherReadEvent RepositoryOtherWriteEvent RepositoryPullEvent RepositoryPushEvent RepositoryHookEvent RepositoryCloneEvent |
Pull requests category
| ベース | AutomaticMergeStoppedEvent AutomaticMergeSucceededEvent PullRequestParticipantStatusUpdatedEvent PullRequestParticipantApprovedEvent PullRequestParticipantReviewedEvent PullRequestParticipantUnapprovedEvent PullRequestParticipantsUpdatedEvent PullRequestDeclinedEvent PullRequestDeletedEvent PullRequestMergedEvent PullRequestOpenedEvent PullRequestReopenedEvent PullRequestReviewersUpdatedEvent PullRequestOpenRequestedEvent |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | 利用可能な追加イベントなし |
Apps category
| ベース | InsightReportConditionAddedEvent InsightReportConditionDeletedEvent InsightReportConditionUpdatedEvent |
|---|---|
| Advanced | 利用可能な追加イベントなし |
| 大 | 利用可能な追加イベントなし |
Diff category
| ベース | 利用可能なイベントなし |
|---|---|
| Advanced | 利用可能なイベントなし |
| 大 | 利用可能なイベントなし |
Search category
| ベース | 利用可能なイベントなし |
|---|---|
| Advanced | 利用可能なイベントなし |
| 大 | 利用可能なイベントなし |
Bitbucket Server customers can set the configuration property audit.legacy.events.logging.forced=true to move the following events from Full to Base level:
- Plugin container unavailable, Plugin module disabled, Plugin module enabled, Plugin module available, Plugin framework started
- User log in failed, User logged in, User logged in (SSH)
- Repository read event, Repository write event, Repository pull event, Repository push event, Git hook activity, Repository cloned
Note that adding these events to Base can significantly increase the size of the audit log.