Unable to trace who created which user through REST API

XMLWordPrintable

    • 1
    • Severity 3 - Minor

      Issue Summary

      When auditing a user creation, only users created through the UI are recorded in the logs (atlassian-access-log.log)

      Steps to Reproduce

      • Create user through REST API 
        • TOKEN='<token>'
URL="http://<BAMBOOURL>"
curl -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" -X POST $URL/rest/api/latest/admin/users --data '{
     "name": "UserName",
     "fullName": "Full Name",
     "email": "user@company.com",
     "password": "passwords",
     "passwordConfirm": "passwords"
 }'
      • Tail all logs (Tomcat and Application logs) 
        • grep -i username /var/atlassian/application-data/bamboo/logs/atlassian-bamboo*;grep -i username /opt/atlassian/bamboo/logs/*;

      Expected Results

      Record user creation within Audit logs

      Currently, when creating user with UI, the steps are recorded in atlassian-bamboo-access.log

      2025-12-29 14:09:01,993 INFO [http-nio-8085-exec-14 url: /admin/user/createUser.action] [AccessLogFilter] 192.168.65.1 skumar14 POST http://bamboo1025:8085/admin/user/createUser.action 438139kb
2025-12-29 14:09:02,070 INFO [http-nio-8085-exec-7 url: /admin/user/viewUser.action] [AccessLogFilter] 192.168.65.1 skumar14 GET http://bamboo1025:8085/admin/user/viewUser.action?username=testuser2 434909kb
2025-12-29 14:09:02,246 INFO [http-nio-8085-exec-12 url: /rest/announcement/1.0/announcement] [AccessLogFilter] 192.168.65.1 skumar14 GET http://bamboo1025:8085/rest/announcement/1.0/announcement?_=1767017342223 406876kb
2025-12-29 14:09:02,277 INFO [http-nio-8085-exec-13 url: /rest/menu/latest/appswitcher] [AccessLogFilter] 192.168.65.1 skumar14 GET http://bamboo1025:8085/rest/menu/latest/appswitcher?_=1767017342224 405636kb
2025-12-29 14:09:02,292 INFO [http-nio-8085-exec-11 url: /rest/api/latest/admin/users/testuser2/assigned-groups] [AccessLogFilter] 192.168.65.1 skumar14 GET http://bamboo1025:8085/rest/api/latest/admin/users/testuser2/assigned-groups?_=1767017342227 404260kb
2025-12-29 14:09:02,292 INFO [http-nio-8085-exec-16 url: /rest/troubleshooting/1.0/check/skumar14] [AccessLogFilter] 192.168.65.1 skumar14 GET http://bamboo1025:8085/rest/troubleshooting/1.0/check/skumar14?_=1767017342226 404260kb

      Actual Results

      Nothing is recorded

      Workaround

      No workaround is known at the moment. A workaround will be added here when available

              Assignee:
              Mateusz Szmal
              Reporter:
              Ricardo (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: