Atlassian Confluence Audit (via Codeless Connector Framework)
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Connector ID | AtlassianConfluenceConnector |
| Publisher | Microsoft |
| Used in Solutions | AtlassianConfluenceAudit |
| Collection Method | CCF |
| Connector Definition Files | AtlassianConfluenceAudit_DataConnectorDefinition.json |
| CCF Configuration | AtlassianConfluenceAudit_PollingConfig.json |
| CCF Capabilities | Basic, Paging |
The Atlassian Confluence Audit data connector provides the capability to ingest Confluence Audit Records events into Microsoft Sentinel through the REST API. Refer to API documentation for more information. The connector provides ability to get events which helps to examine potential security risks, analyze your team's use of collaboration, diagnose configuration problems and more.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
ConfluenceAuditLogs_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions: - Workspace (Workspace): Read and Write permissions are required.
Custom Permissions: - Atlassian Confluence API access: Permission of Administer Confluence is required to get access to the Confluence Audit logs API. See Confluence API documentation to learn more about the audit API.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Connect to Atlassian Confluence API to start collecting audit logs in Microsoft Sentinel
To enable the Atlassian Confluence connector for Microsoft Sentinel, click to add an organization, fill the form with the Confluence environment credentials and click to Connect. Follow these steps to create an API token. Connector Management Interface
This section is an interactive interface in the Microsoft Sentinel portal that allows you to manage your data collectors.
📊 View Existing Collectors: A management table displays all currently configured data collectors with the following information: - Atlassian Confluence organization URL
➕ Add New Collector: Click the "Add new collector" button to configure a new data collector (see configuration form below).
🔧 Manage Collectors: Use the actions menu to delete or modify existing collectors.
💡 Portal-Only Feature: This configuration interface is only available when viewing the connector in the Microsoft Sentinel portal. You cannot configure data collectors through this static documentation.
Add organization
Add Atlassian Confluence organization
When you click the "Add organization" button in the portal, a configuration form will open. You'll need to provide:
- Atlassian Confluence organization URL (required):
.atlassian.net - User Name (required): User Name (e.g., user@example.com)
- API Token (required): API Token
💡 Portal-Only Feature: This configuration form is only available in the Microsoft Sentinel portal.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊