Issue Summary

Currently, audit logs only capture the creation of new sites, but do not log when new apps (such as JSM trials) are added to existing sites. This gap makes it difficult for admins and security teams to track changes in site capabilities and potential security exposures. Customers have requested more comprehensive audit logging to improve visibility and accountability for all significant changes, including app installations on existing sites.

Capture information such as the app name, the user who performed the action, and the timestamp.

Customer Use Case:
As an admin, I need to be able to review audit logs to see when any app (including trials) is added to an existing site, so I can ensure compliance, investigate incidents, and maintain a secure environment.

Lack of audit entries for app additions can result in undetected changes to site functionality, potentially introducing security risks or compliance issues. Comprehensive logging is essential for incident response and forensic analysis.

Workaround

Reach out to Atlassian Support/Customer Advocates to get information on creation.