Error when loading the audit log in crowd
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Problem
Viewing the audit log fails with the message:
"Error when loading the audit log. See error logs for details.".
The following appears in the crowd-atlassian.log
2018-11-22 16:14:21,669 http-nio-8095-exec-6 WARN [common.security.jersey.XsrfResourceFilter] Additional XSRF checks failed for request: http://example.com/crowd/rest/admin/latest/auditlog/query , origin: https://example.com , referrer: https://example.com/crowd/console/secure/auditlog/browse.action , credentials in request: true , allowed via CORS: falseCause
The logs are reporting an XSRF (Cross Site Request Forgery) warning, which is generally logged when the request's origin does not match its target.
More information available from this documentation:
Resolution
- Make sure you access Crowd using the exact base URL of the Crowd instance.
- If you have a reverse proxy in front of Crowd, please ensure your server.xml file contains the correct proxyName, proxyPort, and scheme parameters in your connector.
Last modified on Nov 28, 2018
Powered by Confluence and Scroll Viewport.