**The redirect\_uri must match this URL.**
[](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-04/vmzdQskGSufwcHHW-image.png) 8. Click Save changes. 9. In **Authorization URL generator** Copy and Paste in the browser. [](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-04/B6IYfcH2luAqwRAs-image.png) [](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-04/19XHXQfd2zApQpIO-image.png) 10. Copy the URL and paste in text editor (notepad).[](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-04/nXh8vWzcku4XLqYA-image.png) **Example of a copied URL (the boxed section contains the authorization code).**
--- ##### **Exchange authorization code for access token****Paste this Curl command into terminal.**
```bash curl --request POST \ --url 'https://auth.atlassian.com/oauth/token' \ --header 'Content-Type: application/json' \ --data '{"grant_type": "authorization_code","client_id": "YOUR_CLIENT_ID","client_secret": "YOUR_CLIENT_SECRET","code": "YOUR_AUTHORIZATION_CODE","redirect_uri": "https://YOUR_APP_CALLBACK_URL"}' ``` Change all fields: - `client_id`: (*required*) Set this to the **Client ID** for your app. Find this in **Settings** for your app in the [developer console](https://developer.atlassian.com/console/myapps/ "https://developer.atlassian.com/console/myapps/"). - `client_secret`: (*required*) Set this to the **Secret** for your app. Find this in **Settings** for your app in the [developer console](https://developer.atlassian.com/console/myapps/ "https://developer.atlassian.com/console/myapps/"). - `code`: (*required*) Set this to the authorization code received from the initial authorize call (described above). - `redirect_uri`: (*required*) Set this to the callback URL configured for your app in the [developer console](https://developer.atlassian.com/console/myapps/ "https://developer.atlassian.com/console/myapps/").**If successful, this call returns an access token similar to this:**
```json HTTP/1.1 200 OK Content-Type: application/json { "access_token":**Replace "ACCESS\_TOKEN" with your newly generated token.**
```bash curl --request GET \ --url https://api.atlassian.com/oauth/token/accessible-resources \ --header 'Authorization: Bearer ACCESS_TOKEN' \ --header 'Accept: application/json' ``` This will retrieve the sites that have scopes granted by the token (see [Check site access for the app](https://developer.atlassian.com/cloud/jira/platform/oauth-2-3lo-apps/#siteaccess) below for details). Find your site in the response and copy the `id`. This is the `cloud_id` for your site.**sample output: a Atlassian Confluence site:**
```json [ { "id": "1324a887-45db-1bf4-1e99-ef0ff456d421", "name": "Site name", "url": "https://your-domain.atlassian.net", "scopes": [ "write:confluence-content", "read:confluence-content.all", "manage:confluence-configuration" ], "avatarUrl": "https:\/\/site-admin-avatar-cdn.prod.public.atl-paas.net\/avatars\/240\/flag.png" } ] ``` --- #### **Creating the Bash Wrapper Script:****The wrapper script manages event collection, logging, and ensures only one instance runs at a time.**
1. **Create required directories for data, logs:****Create a directory named `confluence` (for this example):**
**Don't change "flattened.json" file name so that the script will work properly.**
```bash #!/bin/bash set -euo pipefail # ---------------------------- # Config # ---------------------------- FLAT_FILE="/home/**Replace the "user:group" in this example both `
**The systemd service ensures the event collection runs continuously and restarts automatically on failure.**
**1. Create the service file: ** ``` sudo nano /etc/systemd/system/confluence-audit.service ``` **2. Add the following content to the file:****Replace WorkingDirectory file path.**
```ini [Unit] Description=Atlassian Confluence Audit Log Fetcher After=network.target Wants=network-online.target [Service] Type=oneshot ExecStart=/usr/local/bin/confluence_audit.sh # Run as your user User=testing-confluence WorkingDirectory=/home/testing-confluence/confluence # Logging StandardOutput=journal StandardError=journal # Security (optional but recommended) NoNewPrivileges=true [Install] WantedBy=multi-user.target ``` --- #### **Create a Systemd Timer to handle looping and run automatically in the background:** A systemd timer is a feature of systemd used to schedule tasks to run automatically at specific times or intervals. **1. Create the timer file:** ``` sudo nano /etc/systemd/system/confluence-audit.timer ``` **2. Add the following content to the file:** ```ini [Unit] Description=Run Atlassian Confluence Audit every 10 minutes [Timer] OnBootSec=60 OnUnitActiveSec=600 Persistent=true Unit=confluence-audit.service [Install] WantedBy=timers.target ``` --- #### **Configuring Log Rotation** To manage log file sizes and prevent disk space issues, configure log rotation for Atlassian Confluence Audit Logs. ##### **Step 1:** Create a logrotate configuration file: ``` sudo nano /etc/logrotate.d/confluence_audit ``` ##### **Step 2:** Add the following configuration to the file:**Replace `/home/your_user/` with your actual path, and update `user_owner` and `user_group` to match the correct user and group.**
``` /home/your_user/confluence/flattened.json { daily rotate 7 missingok notifempty copytruncate compress compressoptions -1 delaycompress dateext dateformat -%Y%m%d-%H%M%S create 0640 user_owner user_group } ``` --- #### **Enabling and Starting the Service** **Step 1:** **Reload systemd to recognize the new service file:** ``` sudo systemctl daemon-reload ``` **Step 2: Enable the service to start automatically on boot:** ``` sudo systemctl enable --now confluence-audit.timer ``` **Step 3: Verify the service is running:** ``` sudo systemctl list-timers ```**You should see something like this.**
[](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-04/EOvKLRBONp828xQT-image.png) --- ##### **Monitoring Live Logs:** To view real-time logs from the confluence-audit service: ``` journalctl -u confluence-audit -f ``` ---**Please provide the following information to CyTech.**
- **Flattened.json file path example "/home/testing-confluence/confluence/flattened.json"** --- ***If you need further assistance, kindly contact our support at