youngmon/atlassian-qna huggingface dataset:
Cloud Confluence Security
Asked by Safvan Kothawala:

We migrated from onprem Confluence to Cloud Confluence recently.

We want to ensure that following vulnerability (present in onprem version) is not associated with Cloud Confluence.

CVE-2022-26136

CVE-2022-26137

Kindly confirm.

Thanks,

Safvan


Answers:
author: Ste Wright
body: Hi [@Safvan Kothawala](/t5/user/viewprofilepage/user-id/5117250)

Fixes have already been applied to Cloud sites for these vulnerabilities.

See more information on this page: <https://confluence.atlassian.com/security/multiple-products-security-advisory-cve-2022-26136-cve-2022-26137-1141493031.html>
> **Atlassian Cloud sites are not affected.**
>
> Fixes have been deployed to Atlassian Cloud sites. If your Atlassian site is accessed via a **bitbucket.org** or an **atlassian.net** domain, it is an Atlassian Cloud site.

Ste


author: Mayur Jadhav
body: Hello [@Safvan Kothawala](/t5/user/viewprofilepage/user-id/5117250) ,

Welcome to the Atlassian Community!!

As we don't have access to infrastructure or database, so Atlassian is managing vulnerability fixes, upgrades and so on on Cloud product and Cloud product are up to date.

Regards,  
Mayur


author: Hardik Solanki
body: No, Atlassian cloud instances are not vulnerable to **CVE-2022-26136/7** and no customer action is required.

Please check [this link](https://confluence.atlassian.com/kb/faq-for-cve-2022-26136-cve-2022-26137-1141988432.html) for more info.


author: Howard Nedd
body: Hi [@Safvan Kothawala](/t5/user/viewprofilepage/user-id/5117250) ,

These are not relevant to cloud products.

Regards

Howard


Tags: confluence-cloud

security
Cannot set new start date on StatusPage component / overriding downtime in bulk
Asked by Michael Leung:

I've changed the startdate to be this year (was using last year to test data) and it's returning:

"You have downtime data recorded prior to the start date you selected. Delete that data (incident or maintenance) in order to select this date."

I've deleted all incidents and mainenances but this error still remains.

I can't see any way to delete downtime so I've set the historic downtime on the component to be 0 minutes and 0 hours but it still returns this error.

Any way of getting the data reset for components without recreating it?

Or even if there is some way of using the API to override component downtimes that would be great...


Answers:
author: John M
body: Hi [@Michael Leung](/t5/user/viewprofilepage/user-id/1382617)

It sounds like you may need to go into the component uptime showcase and manually delete any downtime by clicking on and zero-ing out any bars that show downtime:

![2023-02-06_17-05-39.png](https://community.atlassian.com/t5/image/serverpage/image-id/238522i03B64073BC7119D6/image-size/large?v=v2&px=999 "2023-02-06_17-05-39.png")![2023-02-06_17-06-03.png](https://community.atlassian.com/t5/image/serverpage/image-id/238524iB73EA2558E40BA7F/image-size/large?v=v2&px=999 "2023-02-06_17-06-03.png")

comments: author: Darren.Burrows
body: Is their anyway to remove this 'original' downtime? We are trying to do the same thing to a lot of components, but are finding that despite having no downtime logged, we cannot update them. Which we assume is being caused by this. Their are no related incidents that we can find, having deleted any that we created also. ![Screenshot 2023-07-05 at 08.38.38.png](https://community.atlassian.com/t5/image/serverpage/image-id/266779i9EBECCC6278EF76D/image-size/large?v=v2&px=999 "Screenshot 2023-07-05 at 08.38.38.png")


author: Jesse Klein
body: Hi Darren,

This is Jesse from the Statuspage support team. We have a way to reset component data for you but in order to do that, we need a support ticket. Please feel free to raise one and we can give you a hand!

Regards,  
Jesse


Tags: cloud
Inconsistent Datadog Metric Datasets
Asked by Jon Whitaker:

I've setup the Datadog metric integration and have added a metric that reports my system's uptime. The metric looks like the following:

```
A =?sum:synthetics.http.response{check_id:checkid,step_id:stepid,status_code:200}.as_count()
B = sum:synthetics.http.response{check_id:checkid,step_id:stepid}.as_count()

C = 100 * (A/B)
```

I'm reporting metric **C** in my Statuspage monitor.  

If I look at the last 1 month of timeseries data for metric **C** in Datadog I never see a value \> 100%. However, the same timeseries data in Statuspage for the same 1 month period shows a spike at 101% a couple of days ago.  

Why would the timeseries metric values in Statuspage report different values than those in Datadog? What should I try to troubleshoot this further?


Answers:
author: Rafael Meira
body: Hey [@Jon Whitaker](/t5/user/viewprofilepage/user-id/5114630)

It's possible that the issue could be caused by a discrepancy in the way that the metric is being collected and processed by Datadog and Statuspage. To troubleshoot this further, I recommend checking the following:  

1. Make sure that the metric is being collected and processed correctly in Datadog. You can do this by checking the raw data for the metric in Datadog and comparing it to the values that are being displayed in the timeseries chart.

2. Check the settings and configurations for the integration between Datadog and Statuspage. Make sure that the integration is set up correctly and that all necessary permissions are in place.

3. Check the statuspage monitor settings to ensure that the monitor is configured to display the correct data. Make sure that the correct metric is being used and that the time range for the monitor is set correctly.

4. Check for any network or connectivity issues that could be causing delays or errors in the data being sent from Datadog to Statuspage.

I hope this helps! If you continue to have issues, it may be helpful to open a formal ticket with us by going to the <https://support.atlassian.com/statuspage/>

?


Tags: cloud

datadog
Feature request - remove line breaks in HTML output
Asked by Matt Cohen:

We are trying to use a monitoring solution to notify us of changes to our vendors' status pages, run by Statuspage.

We can monitor for the text 'All systems operational" but we'd like more fine-grained notification. Unfortunately our keyword monitoring system can't handle the line breaks that are in the HTMl code.

For example, here is the output code from one such page:

![Unknown.png](https://community.atlassian.com/t5/image/serverpage/image-id/232879i282D63E5C9AA2343/image-size/large?v=v2&px=999 "Unknown.png")

But our monitor can only look for:

---

data-component-id="8h9sn12x310t" class="component-inner-container status-orange "

---

Where the actual HTML is

---

data-component-id="8h9sn12x310t"

class="component-inner-container status-orange "

---

(i.e. with a line break).

Is it possible to adjust your code output so that the data-component-id and class for the DIV tag is all one one line? That will allow us and others to monitor individual sections of a status page and not the entire vendor as a whole.


Answers:
author: Dave Parrish _Atlassian_
body: Hey [@Matt Cohen](/t5/user/viewprofilepage/user-id/5112594) ? Also note that public status pages have a REST API you can access by appending \`/api\` to the status page URL. For example:

```
https://confluence.status.atlassian.com/api
```

In your case, you'd probably want the \`/summary\` endpoint:

```
https://confluence.status.atlassian.com/api/v2/summary.json
```

Which returns output like this:

```
{
  "page": {
    "id": "4g2my7tbhjsq",
    "name": "Confluence",
    "url": "https://confluence.status.atlassian.com",
    "time_zone": "Etc/UTC",
    "updated_at": "2022-12-19T08:00:39.734Z"
  },

  ...

  "status": {
    "indicator": "none",
    "description": "All Systems Operational"
  }
}
```

Of course, this may or may not work with the monitoring system you're already using.

comments: author: Matt Cohen
body: Thank you ! This is very helpful and I appreciate you helping me out with the info!


author: Nic Brough -Adaptavist-
body: Welcome to the Atlassian Community!

Atlassian don't take feature requests from the Community (often), you should raise this in their issue tracker over at jira.atlassian.com

I doubt they'll do this though, as the HTML is well-formed and readable.

comments: author: Matt Cohen
body: Thanks - I actually tried to use jira but there wasn't a category for Statuspage
Custom 404 page for statuspage cloud
Asked by Leon Garcia:

Is there a way to customize 404 pages to avoid malicious actors to use it as a form of attacking our users via text not found. via Text injection,

i.e.

<https://status.company.com/this-page-has-been-changed-go-to_____www.othersite.com>

Please advise


Answers:
author: Shivam Naik
body: Hi [@Leon Garcia](/t5/user/viewprofilepage/user-id/5109125) ,

Happy to help!

At this time, there is not an option to create a custom 404 page for your Statuspage site to control redirects. But I've discussed this with my team since it is a valid point regarding security, and I've created a Feature Request under STATUS-500. This ticket is internal, but if you submit a Support Ticket to us, we can get your Organization added to it for future updates.

Please let me know if you have any follow up questions

comments: author: Alex Scherer
body: [@Shivam Naik](/t5/user/viewprofilepage/user-id/3915058) any progress on that topic in the last 2 years?


author: Chris DeGidio
body: [@Alex Scherer](/t5/user/viewprofilepage/user-id/5582639) No there have been no updates on the task. Feature requests are assessed based on the amount of interest. I'd be happy to go ahead and add your org as a requestor to upvote that. Could you share your Statuspage URL and I can get you added?


Tags: cloud
For how long will my data stored and available to be viewed/exported?
Asked by juan.guinle:

I need to know if after at least two years we are going to be able to view and export all historical data about component status and incidents.


Answers:
author: Jesse Klein
body: Hello Juan,

This is Jesse from the Statuspage support team. Welcome to the community and thanks for the question around data retention. At this time, we do not delete any of the incident and component history. You will be able to access this information for over two years. If you need to export that data, you would be able to use the API and get that information.

Hopefully that helps but please let me know if you have any followup questions. I hope you have a great day!

Regards,  
Jesse
How can I know which subscribers an incident notification went to?
Asked by choi:

Hello,

By default, all subscribers receive incident notifications.

but, If I set ?Allow users to subscribe to individual components?,  
I can't certain that all subscribers receive an notification of specific incident.

Is there a way to check which subscribers are notified when a specific incident occurs?

thanks.


Answers:
author: Rafael Meira
body: Hey Choi! Happy to assist ?  

When an incident occurs on Statuspage, all subscribers will receive a notification by default. However, if you have enabled the option "Allow users to subscribe to individual components", subscribers will only receive notifications for incidents that affect the components they are subscribed to.

To check which subscribers were notified when a specific incident occurs, you can do the following:

1. Navigate to the incident in the Statuspage dashboard.
2. Click on the "Subscribers" tab.
3. The list of subscribers that received a notification for the incident will be displayed.

Alternatively, you can use the Statuspage API to retrieve a list of subscribers for a specific incident. The API documentation provides more information about how to do this.

Remember that subscribers can also choose to opt-out of receiving incident notifications by modifying their notification preferences. This means that even if a subscriber is subscribed to a component affected by an incident, they may not receive information if they have chosen to opt-out of receiving notifications for that component.  

<https://support.atlassian.com/statuspage/docs/enable-component-subscriptions/>  

Try it out and let us know if you have any issues.  

Best,

comments: author: choi
body: Thanks for the reply

but I can't find the Subscribers tab in the incident menu.  
There are Open, Incidents, Maintenances, Templates tabs in the incident menu.  
Even if you click the subscriber menu on the left, all subscribers come out.

and I also couldn't find an API to check which subscribers are notified when a specific incident occurs.  
<https://developer.statuspage.io/>

![asd.PNG](https://community.atlassian.com/t5/image/serverpage/image-id/232011i628FE3A470CBC2CE/image-size/large?v=v2&px=999 "asd.PNG")


author: Howard Nedd
body: I had the same findings. There is no way to which subscribers have been notified.  
An incident will show either if a notification was sent out but not to which subscribers specifically.


Tags: cloud
Github runner flagged as a scanner
Asked by Bj?rn Wedell:

We have seen situations where our status check job in a github actions workflow failed to report the status to Statuspage.io. The response from status page says something like this:

Your IP address \<github runner IP-adress\> has been flagged as a scanner. Scanners are not permitted. If you are seeing this message in error, please contact us at [https://support.atlassian.com/contact.](https://support.atlassian.com/contact./n)

I suppose this might be caused by a lot of actions reporting status, or perhaps github actions actually used for scanning. The range of IP-adresses used by github actions (executed on azure data centers) is updated once a week or so (<https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners#ip-addresses>), but apparently that is not enough.

Using a self-hosted runner is not a good option, since this would bring us back to maintaining our own statuspage machine, which was the reason moving to Statuspage in the first place.


Answers:
author: Rafael Meira
body: Hey Bjorn! Happy to assist.  

It is possible that the IP address of your GitHub Actions runner is being flagged as a scanner because it is making too many requests to the StatusPage.io API in a short period of time. This can happen if your GitHub Actions workflow is set up to run very frequently or if it is making multiple requests to the API for each run.

One way to avoid this issue is to implement rate limiting in your script or program that makes requests to the StatusPage.io API. This means adding a delay between requests or limiting the number of requests that are made within a certain time period. This can help prevent your IP address from being flagged as a scanner.

Alternatively, you could consider using a different IP address for your script or program to make requests to the StatusPage.io API. One way to do this would be to use a proxy server or a VPN service, which can route your requests through a different IP address. This can help to avoid the issue of your IP address being flagged as a scanner.

It is also worth considering reaching opening a formal ticket with our support team to see if they can provide any additional guidance or assistance with this issue.   

Let us know if you have any further questions.  

Best,


Tags: cloud
Zabbix Integration for StatusPage.io
Asked by Mikhales Manalaysay:

it would be nice to have ingration also for zabbix API and vice versa


Answers:
author: Rafael Meira
body: Hey Mikhales! Happy to help ?  

It is possible to integrate Zabbix with StatusPage.io using the StatusPage.io API and the Zabbix API.

To integrate Zabbix with StatusPage.io, you can use the StatusPage.io API to create and update incidents in your StatusPage.io page based on the status of your Zabbix monitored systems. This can be done by using a script or program that periodically queries the Zabbix API for the status of your systems and then uses the StatusPage.io API to create or update incidents as needed.

To integrate StatusPage.io with Zabbix, you can use the Zabbix API to create and update triggers in your Zabbix monitoring system based on the status of your StatusPage.io page. This can be done by using a script or program that periodically queries the StatusPage.io API for the status of your page and then uses the Zabbix API to create or update triggers as needed.

Both the StatusPage.io API and the Zabbix API are REST APIs, which means they can be accessed using HTTP requests. You will need to familiarize yourself with the documentation for both APIs in order to understand how to use them to achieve the desired integration.  

<https://support.atlassian.com/opsgenie/docs/integrate-opsgenie-with-zabbix/>  
<https://docs.opsgenie.com/docs/user-api>  

Best,


Tags: cloud
Status screenshots on dashboard
Asked by Aaron Ott:

I would like to build a status page for one of my internal departments that displays 4 screenshots of remote machines. I will also investigate API components to monitor the status of a few services, but more importantly, I'd like to have a visual status representation with a screenshot.

Is anyone aware of a service that would display current screenshots on a Statuspage dashboard?


Answers:
author: Jesse Klein
body: Hello Aaron,

Thanks for reaching out to the community. I'm Jesse from the Statuspage support team. If I understand correctly, are you trying to have a dashboard that shows the current status of particular machines in real time? If I do understand correctly, then I am not sure if Statsupage would have that capability without some customization. There would be a few things to point out:

1. Statuspage is more of an incident communication tool to let people know if there are issues with your system. It is not really a monitoring tool that could monitor in real time or track a highly accurate SLA. In a case like this, I would recommend an incident monitoring tool like Opsgenie.

2. If you were to customize the page, you could use custom HTML, CSS, and JS to get it to show a particular component and its status. In terms of how to specifically do that would probably require som development from your front end team to manipulate the page into that state.

I guess my biggest question is around screenshots. What exactly would you be wanting to take a screenshot of? The component status of certain components? If you haven't already, I would highly recommend taking a look at Opsgenie as that is able to integrate with a wide variety of tools to help with monitoring and alert management: <https://www.atlassian.com/software/opsgenie>

Regards,  
Jesse


Tags: cloud

screenshot
Is there a way to bulk create and change statuses of components?
Asked by Erhard Czving:

Hi, today I had to create dozens of components and change their status after creation one by one. It took me more than half an hour to finish using the UI.  

Is there a script or a built-in way to create and/or update multiple components at once? I got access to our API key  


Answers:
author: Talar Pavlovic
body: Hey there Erhard,

Thanks for writing into Statuspage Community, I'm Talar from the Atlassian team, happy to help.

You could certainly look at writing a script and utilising our Statuspage API to [create](https://developer.statuspage.io/#operation/postPagesPageIdComponents) and [update](https://developer.statuspage.io/#operation/patchPagesPageIdComponentsComponentId) components rather than doing it all manually in the UI.

Regards,  
Talar


Tags: api

cloud
Selecting Components affected status more easily
Asked by tomas.abella:

For example when selecting about 100 Components affected is there an easy way to change them all to let's say from Operational to Degraded Performance or Major outage easily without clicking on them individually. We find that this takes a while for in the times that we need to inform large groups.


Answers:
author: Shivam Naik
body: Hi [@tomas.abella](/t5/user/viewprofilepage/user-id/5105700) ,

Happy to help!

It might be easier to use the Statuspage API endpoint for Component Updates to change those, possibly through a GET of Component IDs and then scripting them through Component Updates (<https://developer.statuspage.io/#operation/patchPagesPageIdComponentsComponentId>)

If you get a Support Ticket submitted, we can also look at adding you to a Feature Request for an easier option in the UI as well. Another thing that comes to mind could be to group some of these components together if possible so that its easier to update them all at once in bulk.

Please let me know if you have any follow up questions!


Tags: cloud
Resolved e-mail not sending to subscribers
Asked by kevin_harber:

We are receiving several complaints from subscribers that they are not getting the final e-mail notification when an issue is resolved. They are getting all the updates except the last one. Anyone have any thoughts/suggestions?


Answers:
author: Howard Nedd
body: hi [@kevin_harber](/t5/user/viewprofilepage/user-id/5101718) ,

When the agent resolves an incident he can tick the box to either send or don't send a notification to the subscribers. If the box remains unticked, the notification wont be send. Can you test that?

Regards

Howard

comments: author: kevin_harber
body: I will have to check the next time we have to post something on the status page, but according to [this page](https://support.atlassian.com/statuspage/docs/notification-event-triggers/), the notifications should be sent automatically. The check box just overrides the defaults. Also, this issue is only affecting the last update. All of the other updates send notifications correctly whether or not someone checks that box.


author: Howard Nedd
body: Read carefully:

you will have the **option** whether or not you want to send notifications to your subscribers.


author: Howard Nedd
body: ![Screenshot 2022-12-14 at 21.08.46.png](https://community.atlassian.com/t5/image/serverpage/image-id/230501i12234718FCE73EF2/image-size/large?v=v2&px=999 "Screenshot 2022-12-14 at 21.08.46.png")


Tags: cloud