Audit Log
The audit log records everything that happens to links and files: who created a link, when the outside person opened it, what they sent or downloaded, wrong passwords, deletions and policy changes. It answers the questions security and auditors ask. Open it from Jira settings → Apps → Secure File Exchange → Audit log. Only Jira administrators can see it.
Find events
Events are listed newest first. Narrow them with the filters and click Apply:
- Work item: a work item's key.
- Link ID: one link. Clicking a link ID in the list filters by it.
- Event: one type of event, or All events.
- From and To: a date range.
Clear filters shows everything again, and Show more loads older events.
The audit log filtered to one work item, showing Link created, Page opened, File received and Comment posted events.
Choose columns
Columns picks what the list shows: Time (always shown), Event, Work item, Link, Who, Details and IP address. Link and IP address are hidden until you turn them on. Your browser remembers the choice.
Who is the person's name and avatar for someone in your Jira site, Outside person for the person who received a link, and App for what the app did on its own, such as deleting files at the end of retention.
Events
| Event | When |
|---|---|
| Link created | Someone created a link, with its type, expiry and whether it has a password. |
| Link revoked | Someone revoked a link, or the app did after the work item or its project was deleted. |
| Link expired | A link reached its expiry date. |
| Wrong password | Someone entered a wrong password. |
| Link locked, Link unlocked | A link locked after 10 wrong passwords, and someone unlocked it. |
| Page opened | Someone opened a link's page. |
| File received | The outside person sent a file. |
| File shared | Someone added a file to a Send files link. |
| File downloaded | A file was downloaded, by the outside person or from the panel. |
| File deleted | A file was deleted at the end of retention, or after its work item or project was deleted. |
| Comment posted, Comment failed | The app's comment on the work item was added, or could not be. |
| Policy changed | A Jira admin changed the policy, with the settings that changed. |
Export to CSV
Export CSV downloads the events that match your filters, with every column whatever the list shows. One export holds up to 50,000 events, the newest first. If there are more, the file says so: narrow the filters and export the rest separately. Times in the file are in UTC.
What the log keeps, and for how long
- IP addresses are shortened. For an outside person, the log keeps only the start of the address (the network, not the device), never the full address.
- Passwords and the secret part of a link are never recorded.
- Events are deleted after the period your admin sets in Keep audit log (1 year unless changed; see Policies).
The log shows work items and file names from the whole site, including projects you cannot open in Jira yourself.