Overview

The Jenkins integration polls the Jenkins REST API and the Audit Trail Plugin log to collect:

• Job runs, build outcomes, and pipeline triggers
• Job and view configuration changes
• User logins and permission changes
• Plugin and credential modifications
• Master/agent connection events

Prerequisites

• A Jenkins controller reachable from Atatus (publicly accessible URL or via VPC peering).
• Jenkins Audit Trail Plugin installed (recommended) for richer event coverage.
• A Jenkins user with Overall → Read permission and access to the audit log.

Step 1: Install and configure the Audit Trail plugin

1. Sign in to Jenkins as an administrator.
2. Go to Manage Jenkins → Plugins → Available plugins.
3. Search for Audit Trail, install it, and restart Jenkins if prompted.
4. Go to Manage Jenkins → System → Audit Trail and add a Log file logger or a Console logger so events are captured.

Step 2: Generate an API token

1. Click your username in the top-right and choose Configure.
2. Under API Token, click Add new Token, name it atatus-siem, and click Generate.
3. Copy the token value immediately.

Step 3: Connect Jenkins in Atatus

1. In Atatus, go to Security → Cloud SIEM → Integrations.
2. Locate the Jenkins card and click Connect.
3. Fill in the form:

1. Click Connect.

Verification

• The Jenkins card shows Configured.
• Audit and build events appear in Security → Cloud SIEM → Audit Logs → Events with source jenkins.