-
Type:
Suggestion
-
Resolution: Unresolved
-
None
-
Component/s: Security Monitoring and Alerts
-
None
-
3
In the Monitor security threats it is shown that you can setup notifications that are received by email.
It seems that the messages that are triggered could be broad in regard to the specific actions.
The next example notifications are for the installation of a new plugin and then for the upgrade of that plugin:
Subject: [confluence] Security alert for: installing a new plugin Body: This is an automated alert for: installing a new plugin. Alert details Alert ID: Alert-6 Application name: Comala Document Management Application version: 7.6.3 Plugin key: com.comalatech.workflow Alert time: 7 February 2025, 09:36:03 UTC
Subject: [confluence] Security alert for: installing a new plugin Body: This is an automated alert for: installing a new plugin. Alert details Alert ID: Alert-7 Application name: Comala Document Management Application version: 7.7.0 Plugin key: com.comalatech.workflow Alert time: 7 February 2025, 09:41:35 UTC
As you can see, the email has the same Subject and part of the body. It would be great to have specific and correct messages for the actions taken for the plugins, thus enhancing the notifications. Also for any other actions as having the exact status/actions helps with security to prevent misinformation.
As part of this request, it is very important to have this also validated with the correct translations for the different languages supported by Confluence.