{
  "opencollection": "1.0.0",
  "info": {
    "name": "Atlassian Admin Account Audit API",
    "version": "1.0.0"
  },
  "request": {
    "auth": {
      "type": "bearer",
      "token": "{{bearerToken}}"
    }
  },
  "items": [
    {
      "info": {
        "name": "Audit",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Atlassian Export Audit Records",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.atlassian.com/wiki/rest/api/audit/export",
            "params": [
              {
                "name": "startDate",
                "value": "",
                "type": "query",
                "description": "Filters the exported results to the records on or after the `startDate`.\nThe `startDate` must be specified as [epoch time](https://www.epochconverter.com/) in milliseconds."
              },
              {
                "name": "endDate",
                "value": "",
                "type": "query",
                "description": "Filters the exported results to the records on or before the `endDate`.\nThe `endDate` must be specified as [epoch time](https://www.epochconverter.com/) in milliseconds."
              },
              {
                "name": "searchString",
                "value": "",
                "type": "query",
                "description": "Filters the exported results to records that have string property values\nmatching the `searchString`."
              },
              {
                "name": "format",
                "value": "",
                "type": "query",
                "description": "The format of the export file for the audit records."
              }
            ]
          },
          "docs": "The Export Audit Records operation is a GET endpoint in the Atlassian Confluence Audit API accessible via `/wiki/rest/api/audit/export` that allows administrators to retrieve and download audit log data from their Confluence instance. This endpoint enables users to export audit records in a structured format for compliance, security analysis, archival purposes, or integration with external monitoring and SIEM systems. The operation typically supports filtering parameters to narrow down the audit"
        },
        {
          "info": {
            "name": "Atlassian Get Audit Records for Time Period",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.atlassian.com/wiki/rest/api/audit/since",
            "params": [
              {
                "name": "number",
                "value": "",
                "type": "query",
                "description": "The number of units for the time period."
              },
              {
                "name": "units",
                "value": "",
                "type": "query",
                "description": "The unit of time that the time period is measured in."
              },
              {
                "name": "searchString",
                "value": "",
                "type": "query",
                "description": "Filters the results to records that have string property values\nmatching the `searchString`."
              },
              {
                "name": "start",
                "value": "",
                "type": "query",
                "description": "The starting index of the returned records."
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "The maximum number of records to return per page.\nNote, this may be restricted by fixed system limits."
              }
            ]
          },
          "docs": "The Atlassian Confluence Audit API endpoint `/wiki/rest/api/audit/since` using the GET method retrieves audit records that have been created since a specified time period. This operation allows administrators and authorized users to query and review system audit logs within a defined timeframe, providing visibility into user actions, system changes, and security-related events that occurred after a particular timestamp. The endpoint is essential for compliance monitoring, security auditing, and "
        },
        {
          "info": {
            "name": "Atlassian Get Retention Period",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.atlassian.com/wiki/rest/api/audit/retention"
          },
          "docs": "Returns the retention period for records in the audit log. The retention<br>period is how long an audit record is kept for, from creation date until<br>it is deleted.<br><br>**[Permissions](https://confluence.atlassian.com/x/_AozKw) required**:<br>'Confluence Administrator' global permission."
        },
        {
          "info": {
            "name": "Atlassian Set Retention Period",
            "type": "http"
          },
          "http": {
            "method": "PUT",
            "url": "https://api.atlassian.com/wiki/rest/api/audit/retention",
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Sets the retention period for records in the audit log. The retention period<br>can be set to a maximum of 1 year.<br><br>**[Permissions](https://confluence.atlassian.com/x/_AozKw) required**:<br>'Confluence Administrator' global permission."
        },
        {
          "info": {
            "name": "Atlassian Get Audit Records",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.atlassian.com/wiki/rest/api/audit",
            "params": [
              {
                "name": "startDate",
                "value": "",
                "type": "query",
                "description": "Filters the results to the records on or after the `startDate`.\nThe `startDate` must be specified as [epoch time](https://www.epochconverter.com/) in milliseconds."
              },
              {
                "name": "endDate",
                "value": "",
                "type": "query",
                "description": "Filters the results to the records on or before the `endDate`.\nThe `endDate` must be specified as [epoch time](https://www.epochconverter.com/) in milliseconds."
              },
              {
                "name": "searchString",
                "value": "",
                "type": "query",
                "description": "Filters the results to records that have string property values\nmatching the `searchString`."
              },
              {
                "name": "start",
                "value": "",
                "type": "query",
                "description": "The starting index of the returned records."
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "The maximum number of records to return per page.\nNote, this may be restricted by fixed system limits."
              }
            ]
          },
          "docs": "Returns all records in the audit log, optionally for a certain date range.<br>This contains information about events like space exports, group membership<br>changes, app installations, etc. For more information, see<br>[Audit log](https://confluence.atlassian.com/confcloud/audit-log-802164269.html)<br>in the Confluence administrator's guide.<br><br>**[Permissions](https://confluence.atlassian.com/x/_AozKw) required**:<br>'Confluence Administrator' global permission."
        },
        {
          "info": {
            "name": "Atlassian Create Audit Record",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.atlassian.com/wiki/rest/api/audit",
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Creates a record in the audit log.<br><br>**[Permissions](https://confluence.atlassian.com/x/_AozKw) required**:<br>'Confluence Administrator' global permission."
        }
      ]
    }
  ],
  "bundled": true
}