Storage:
Currently the maximum number of audit logs that can be exported via CSV is 10,000, as documented here. In the case of companies with a very large number of users, old events can disappear much earlier like 14 days. In order to export over 180 days of data, the limit needs to be raised to somewhere around 200000 events. However, there is no feature provided to achieve this.
Export:
As an administrator of an Atlassian organization, the user is able to export the audit logs; however; exports are still limited by the 10,000 export limit.
Workaround:
Use the organization audit logs REST API to retrieve 180 days of data with no event limit.
- duplicates
-
JRACLOUD-68267 Jira audit log retention period needs to be increased
- Gathering Interest
- is duplicated by
-
- Closed
- is related to
-
- Gathering Interest
-
- Gathering Interest
- relates to
-
- Gathering Interest
[ACCESS-991] Increase audit log storage and export
After some analysis, we've found that this ticket is a duplicate of the request JRACLOUD-68267 – Jira audit log retention period needs to be increased
We encourage you to watch and vote on the above instead. All internal ticket references on this ticket have been transferred. If you do not think this issue should have been closed, please add a comment here saying why and we can reopen it.
I believe this issue is a duplicate of JRACLOUD-68267 – Jira audit log retention period needs to be increased which has more votes.
I recommend that watchers of this issue vote on and watch the above issue. So that votes aren't split, I believe this ticket should be closed, but I will wait a week before taking any action in case anyone disagrees. Thank you!
The Organization audit log at admin.atlassian.com does not have a limit on the number of events that can be stored - technically it's unlimited. However, events are restricted to the past 180 days only (30 days for user activity logs, like Jira and Confluence user activity).
There is a 10k limit on the CSV export - the export will only capture the most recent 10,000 events. If more events are required, we recommend using the audit log API: https://developer.atlassian.com/cloud/admin/organization/rest/api-group-orgs/#api-orgs-orgid-events-get
By scripting against that API, an admin can retrieve all 180 days of stored logs.
In my site, at most, 7000 new events are created. Therefore, we need to export the audit log every day.
I hope this feature will be implemented soon.
+1 from our company. 10k records is not even enough for us if we filter the Audit Log by "Made Request to API" to look for the activity of service accounts.