How can I track page deletions via Access Logging?
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Problem
I have configured both AccessLogFilter and the Tomcat Access Log on my Confluence instance in an effort track page deletions. However, based on the documentation here, I am not seeing page deletions logged as <confluence-url>/pages/removepage.action?pageId=<pageId>. Why is this and how can I track page deletions?
Diagnosis
Environment
Confluence Server
Cause
This is due to the way that Confluence handles page deletions. Rather than loading the aforementioned raw URL to perform the deletion, Confluence's Page Hierarchy plugin is tasked with actually removing the page. As such, the removepage.action is not seen from the logs. Instead, you will see the REST endpoint of the plugin performing the page deletion as rest/page-hierarchy/delete.
Log Sample
1
[01/Jan/2018:01:01:10 -0100] 127.0.0.1 johnnyappleseed - http://myconfluencesite/display/TEST/Hello+World 970B810536394D94C401400988328E48 /rest/page-hierarchy/delete POST 127.0.0.1 confluence http-nio-exec-01 91 15 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36Was this helpful?