youngmon/atlassian-qna huggingface dataset:
log4j 1.2.17 question
Asked by KSD:

We are using the Bamboo server on a closed network.

Recently, I received a call saying that a vulnerability was also found in the 1.2.xx version of log4j.

As a result of checking the Atlassian homepage, it was confirmed that the 1.2.17 version of log4j exists on both the Bamboo server and the Bamboo target server.

I want to know if that jar file is used and if it is vulnerable to security.

Additionally, it would be appreciated if you could tell us the exact config name of log4j used in Bamboo.

I don't see the log4j config file on the target server side.\[bamboo-agent\]

If there is no config file for log4j , I wonder if it doesn't matter.

thank you.


Answers:
author: Nic Brough -Adaptavist-
body: Welcome to the community!

Please see <https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228/ba-p/1886598> for the main discussion and pointers to what to do.


author: Anik Sengupta
body: As explained in the [security advisory](https://confluence.atlassian.com/security/multiple-products-security-advisory-log4j-vulnerable-to-remote-code-execution-cve-2021-44228-1103069934.html), Atlassian on-premises products (including Bamboo) use an Atlassian-maintained fork of Log4j 1.2.17, which is not vulnerable to CVE-2021-44228.

We have done additional analysis on this fork and confirmed a new but similar vulnerability that can only be exploited by a trusted party. Please check the security advisory page for details on how you can ensure that you are not vulnerable to this.

For Bamboo Server \& Data Center, you will also need to check for remote agents with a custom logging configuration as follows:

If you have a properties file specified for the variable wrapper.java.additional.X=-Dlog4j.configuration (in \<bamboo-agent-home\>/conf/wrapper.conf), check if the org.apache.log4j.net.JMSAppender is present in the properties file. If it is, you will need to comment it out or remove it.


Tags: cve-2021-44228
log4j impact on bamboo plugins
Asked by Richin Gupta:

Hi

pls provide the impact of log4j issue on below bamboo plugins

|---------------------|--------------------------------------|
| Stellarity Software | PowerShell Task for Bamboo (Server)  |
| AutoTestingTools    | UFT for Bamboo for Bamboo (Server)   |
| Mibex Software GmbH | Sonar for Bamboo for Bamboo (Server) |


Answers:
author: Nic Brough -Adaptavist-
body: Apps are affected because they use Bamboo's log4j implementation, they don't re-invent the wheel.

See <https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228/ba-p/1886598> for more.

comments: author: Roman Stoffel
body: Exactly, most apps will use Bamboo's logging infrastructure, so the Atlassian report applies.  

This applies for our [Sonar for Bamboo](https://mibexsoftware.atlassian.net/wiki/spaces/MSS/pages/3158343697/CVE-2021-44228+log4j+vulnerability+impact+on+Mibex+apps) Server as well.


author: Sergey Podobry _Stellarity Software_
body: PowerShell Task for Bamboo (Server) uses Bamboo's log4j facility and doesn't make any changes to it, adds JMS Appender or includes javax.jms API in the CLASSPATH. So you're safe unless someone has write access to the Bamboo's log4j.properties file.

Also read [FAQ for CVE-2021-44228](https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html) from Atlassian.


Tags: cve-2021-44228

log4j

server
Conditional Jobs
Asked by Michael:

Bamboo has conditional tasks but I'm searching for conditional jobs.

The problem with tasks is that an agent is needed to run the job. Actually I need a way to conditionally skip a whole job without waiting for an agent.

Is there a way to skip parts of the build plan without the need for the specific agent?


Answers:
author: Steffen Opel _Utoolity_
body: I'm afraid this capability is not available right now (and not easily approximated either) - please watch and vote for the following feature request to raise Atlassian's awareness of this ask:

* [Conditionally run jobs for plans (BAM-21311)](https://jira.atlassian.com/browse/BAM-21311)
Can build hanging criteria be overridden in yaml specs?
Asked by C:

Is it possible to override the default hanging criteria with yaml specs? I have a build where I've set this up in the web UI but it doesn't seem to translate when I export it as yaml. I also see no mention of this in the yaml specs reference.

Looking for this behavior:

<https://confluence.atlassian.com/bamboo/configuring-the-hanging-build-event-289277188.html>

But in yaml specs.

<https://docs.atlassian.com/bamboo-specs-docs/8.0.5/specs.html?yaml>


Answers:
author: margo
body: According to this issue it should be included in 8.1.1, but it is not explained how to do this:  
<https://jira.atlassian.com/browse/BAM-20887>


Tags: spec

yaml
Got Issue While Installed Bamboo
Asked by Biswajit Sahu:

Hi,

Please help me to install Bamboo, I have tried a lot and find your solution through attalasian community, But still getting same issue. I am trying to learn Bamboo. Please help me on this to install Bamboo.

Please find the attached screen-shot Which I got the issue, even I setup my username in my local, but got same issue.

Thanks![Bamboo.PNG](https://community.atlassian.com/t5/image/serverpage/image-id/173798iF4CE6D2E44CEB33B/image-size/large?v=v2&px=999 "Bamboo.PNG")


Answers:
author: Pramodh M
body: Hi [@Biswajit Sahu](/t5/user/viewprofilepage/user-id/4571582)

You have to install \& run the application installation as an Administrator.

Now that you have installed the Application,

* Stop the application
* Give the permission to the user in a directory
* Start the application

That should basically fix the problem

Thanks,  
Pramodh

comments: author: Biswajit Sahu
body: Thanks for quick response [@Pramodh M](/t5/user/viewprofilepage/user-id/3691224) ,

I followed your suggestion but got same issue. Please help me on this.

Thanks,

Biswajit


author: Pramodh M
body: Please send me the logs in the home directory

Thanks,

Pramodh


author: Biswajit Sahu
body: This is my home-directory "C:\\Users\\BiswajitS\\bamboo-home", In that directory no file was there


author: Biswajit Sahu
body: In that directory was empty,

Thanks,

Biswajit
Can't change About This Site title
Asked by Interesting stuff with Kris Zhang:

Hi,  
I can't change the title :

#### About this page {#toc-hId--537989541}

it is the part where you put some info about this page   

Image example:

![Screenshot 2021-07-30 191726.jpg](/t5/image/serverpage/image-id/153719i13D6CB69CC849CCC/image-size/large?v=v2&px=999 "Screenshot 2021-07-30 191726.jpg")

Is this a paided option or what. Will appreciate an answer.


Answers:
author: Nick Coates
body: Hi,

Welcome to the Atlassian Community!

To change the page information including About this page navigate to:

Your Page -\> Customize page and emails -\> About the page (scroll down):

![Screenshot 2021-07-30 at 08.34.29.png](https://community.atlassian.com/t5/image/serverpage/image-id/153724i236630C84ABA17BA/image-size/large?v=v2&px=999 "Screenshot 2021-07-30 at 08.34.29.png")

Hope this helps.

Thanks,  
Nick


author: Emiliano Fernando Cicarelli
body: Hello, My Name is Emiliano, it is my first question.

I can modify the title "About this site" Is there a possibility to be able to change it?

The same for "Past Incidents" does anyone know how to do it?

Try this article the Bitbucket: [https://bitbucket.org/atlassian/statuspage-sample-customizations/src/master/custom_component_statuses_js/custom_component_statuses.html?mode=edit\&at=master](https://bitbucket.org/atlassian/statuspage-sample-customizations/src/master/custom_component_statuses_js/custom_component_statuses.html?mode=edit&at=master)

and it didn't work for me.

Please help! Thank you...
Past Incidents
Asked by roxanne.corrieri:

Hi All, I'm looking at ways to streamline a status page so that it only shows open incidents. I want to remove the past incident history feed at the bottom of the page.

Has anyone done this, and how is it done please?


Answers:
author: Nick Coates
body: Hi [@roxanne.corrieri](/t5/user/viewprofilepage/user-id/4494068)

Welcome to the Atlassian Community!

You will need to be on a plan that allows you to customize the CSS and then include the following code (we have past incidents removed across all of our pages here at Broadcom):

.incidents-list{  
display:none;  
}

Your page needs to be on Startup or higher plan in order to make CSS customizations.

Hope this helps.

Thanks,  
Nick


author: roxanne.corrieri
body: AH seen this has been asked recently! Should of looked harder.

Looks like its not possible out of the box and this is the go-to article: <https://support.atlassian.com/statuspage/docs/css-and-javascript-snippets-for-customizations/>


Tags: cloud
Automatic Components according to Jira Project
Asked by Berat ?olak:

Hi,

I want to categorize components according to Jira Project. For example, if incidents come from A project in Jira, its components will be "API", but if incidents come from "B Project" in Jira, its components will be "PRODUCT"....

Since I will send an email to colloborators according to components, I need to categorize them.

How can I make automation for this request?


Answers:
author: Gaurav
body: Hello [@Berat ?olak](/t5/user/viewprofilepage/user-id/4494036)

This is possible using automation. If this is for limited projects like 4 or 5, then the scope can be adjusted accordingly; else if we need to for the entire then it needs to be a global automation.

Please ensure that all the applicable projects are listed in the Projects drop down below scope.

Kindly let me know if this helps are if you have any further questions.

![Componenet Rule.JPG](https://community.atlassian.com/t5/image/serverpage/image-id/153514iCAF98013DB2C567A/image-size/large?v=v2&px=999 "Componenet Rule.JPG")


Tags: cloud
Is there a way to require subscribers to choose the components they want?
Asked by Chris Migs:

Currently when subscribers subscribe to our status page, all the components are defaulted to "on"...so a customer receives outage notifications for everything. I would prefer the subscriber choose the specific components they are interested in. Can this default be changed? Thanks in advance


Answers:
author: Nick Coates
body: Hi [@Chris Migs](/t5/user/viewprofilepage/user-id/4496247)

Welcome to the Atlassian Community!

Subscribers are able to choose which components they would like to subscribe to but your page needs to be on an appropriate plan. To allow users to subscribe by component you need to be on Business or Enterprise plans (Free, Hobby \& Startup do not include this).

More information here: <https://www.atlassian.com/software/statuspage/pricing>

Hope this helps.

Thanks,  
Nick

comments: author: Chris Migs
body: Thanks for the reply...Yes, we have a Business Subscription...the issue is my customers who sign up for Status Page notifications are defaulted to get notifications on 20+ components unless they "de-select" components they do not purchase. I would like to require our customers to click each component they'd like to get an notification for rather than the current default which is to get all components unless they "de-select"

Make sense? Any advice is appreciated.

Chris


author: ray.adams
body: HI,

I don't think that the question. was answered. The issue is:

When a customer subscribes to StatusPage, StatusPage automatically selects all components.

What we NEED is: when a customer subscribes, NO components are automatically selected. The customer should select each component they want.

How do we make this happen?


author: Chris Migs
body: Thanks Ray...yes, you have summarized my question perfectly


Tags: cloud
Access to Components in a Component Group
Asked by David Speck:

I'm testing out using a component group in Status Page, but it doesn't seem to do anything other than provide some formatting on the Page itself. I want to subscribe a Page Access User to the component group and then not need to subscribe them to the individual components inside the group. I would like the access to the components in the component group to automatically be granted to Users who are subscribed to the group. This way I could add more components to the Component Group in the future and people would just automatically see them.

Is there a way to make this work like this? Ultimately we should be able to subscribe people both to individual components and (if we choose) component groups.


Answers:
author: Nick Coates
body: Hi David,

Welcome to the Atlassian Community.

If you would like a user subscribed to a component group you would need to select all of those child components in that group. I can't see any other way to be able to select the group in the Audience area.

I would recommend raising this with Support as a [feature request](https://support.atlassian.com/contact/). I'd too be interested in having the ability to be able to subscribe users to a component group would be beneficial for me (I have an Audience Specific page with 400+ components and 32 groups so this would make my life easier).

Once you've raised the ticket let me know the # and I'll raise another one referencing your ticket. The more customers requesting the same feature the higher the priority in the backlog.

**Note**: Statuspage feature requests currently do not follow the other Atlassian products where you log them on the public Jira. Instead it needs to be raised via a ticket.

comments: author: David Speck
body: Thanks Nick! I logged a feature request to be able to configure the Component Group ( if I want) so that granting permission to the Group automatically grants permission to the Components inside the Group. The ticket is SPSP-21708


author: Tim Dolson
body: [@David Speck](/t5/user/viewprofilepage/user-id/4491558) Hey David. Did this ever happen?


author: David Speck
body: [@Tim Dolson](/t5/user/viewprofilepage/user-id/1532984) I don't think so


author: Tim Dolson
body: [@David Speck](/t5/user/viewprofilepage/user-id/4491558) Bummer but, thanks for your reply, David. How do I get to the ticket you submitted? Do you have a link to it? Maybe I can pile on.


author: David Speck
body: [@Tim Dolson](/t5/user/viewprofilepage/user-id/1532984) I think you need to submit the same request yourself at this link:

<https://support.atlassian.com/contact/>

If you reference my existing ticket number that might help, I don't know. But I don't think they are externally accessible


author: Tim Dolson
body: [@Nick Coates](/t5/user/viewprofilepage/user-id/732642) Hey Nick. As Product Owner can you give us an update on this ticket that David submitted, SPSP-21708? Also, alternatively, is there a means for us to track the ticket ourselves?

Tim

cc: [@David Speck](/t5/user/viewprofilepage/user-id/4491558)


Tags: cloud
How can we get more than 50 team members access to Statuspage?
Asked by Naka Le Quoc Khanh:

In my company, we would like to allow all of our developers access to Statuspage so they can update Statuspage whenever necessary. However, StatusPage has a limit of 50 team members. What can I do to fix this?


Answers:
author: Nick Coates
body: Hi Naka,

I would recommend raising a ticket with Atlassian Support and asking if they could increase your team members (if you are on Enterprise). Alternatively when you add/create more pages you get more team members (for example Broadcom has 14 pages so we have a lot of team member spaces available).

To contact support visit [this](https://support.atlassian.com/contact/) link.

Hope this helps.

Thanks,  
Nick


Tags: cloud
Incident creation and template association
Asked by First Last:

When creating an incident, how do i associate it with a template ?


Answers:
author: Talar Pavlovic
body: Hi there,

To create a template:

1. Click on **Incidents** from the left-hand panel
2. Click on **Templates** in the main part of the screen
3. Click on the blue, **Create template**button
4. Fill in the template as per your requirements then save it

You will then see your newly created template under the **Templates**menu

To use your template:

1. Go to the **Incidents** tab
2. Click on the blue **Create incident** button
3. Click on **Apply template** then choose the template you create

For more information please take a look at our support documentation here:

* <https://support.atlassian.com/statuspage/docs/create-an-incident-template/>
* <https://support.atlassian.com/statuspage/docs/create-a-template-group/>

Regards,   
Talar

comments: author: Saleh Abdelhalim
body: Hi !

Do you know if it is possible to mention in the Body of an incident Template the component to which incident is applied to ? that would be helpful ! if this is already possible could you share Syntax ? thks !


Tags: cloud
In the status page, a new page was created by one user but this page is not visible to another user.
Asked by Meenakshi Razdan:

In the status page, a new page was created by one user but this page is not visible to me (another user. What can be the reason?

Please help.


Answers:
author: Robert
body: Hi [@Meenakshi Razdan](/t5/user/viewprofilepage/user-id/4487927) !

Users can be granted permissions to view specific pages from the User Management menu within Statuspage.

Some users (product/site admins) will get the ability to view all pages automatically; however, some will need to be explicitly invited to a new page:

<https://support.atlassian.com/statuspage/docs/set-up-user-permissions-for-team-members/>

Hope this helps!

comments: author: Meenakshi Razdan
body: Thanks, Robert. This solution worked.


Tags: cloud

visibility
How to append a historical degraded performance incident to a component in one of the groups.
Asked by Arun Rahar:

We had a status page notification sent out for a particular component. We have multiple groups and this particular component is present in all. We missed to add one of the groups on the incident report and now want to have the incident linked against that group, but I am unable to do so.


Answers:
author: Jesse Klein
body: Hello Arun,

Welcome to the community and thanks for the question about adding components after an incident is closed out.

Unfortunately, Once you close out an incident, you cannot edit the components on the incident anymore. If you want to record the downtime, however, you can go to the component in question, find the uptime tracker and select the day you wish to edit. You can then manually enter the amount of downtime for that component.

If you need to have it linked to the components, you would need to delete the incident and then recreate it. You can then edit the start and stop times for the incident so that it reflects your original time.

Hopefully that helps you out. I hope that you have a wonderful day!

Regards,

Jesse


Tags: cloud
How to prevent reloading of status page?
Asked by Bulusu Venkatesh:

Hi,

I have created a 6 different status pages under one account and linked open page with another page. But when i try to switch from one page to another page, the browser page reloads, but i don't want it to happen.

Is there any way to prevent reloading of pages? if it is there please share it with me.


Answers:
author: Abraham Musalem
body: Hey Bulusu,

Thanks for reaching out. Unfortunately there is no way to prevent the reload of the page. This is because the page automatically reloads to check for any status changes. I do apologize for the inconvenience.   

Let me know if you need anything else.

comments: author: Bulusu Venkatesh
body: Hi Abraham,

Shared a auth0 Status page link - [Auth0 Status Page](https://status.auth0.com/)

can you please guide me how they have customized the page?


author: Abraham Musalem
body: Hey [@Bulusu Venkatesh](/t5/user/viewprofilepage/user-id/4457151) ,

You can see our custom HTML/CSS cheat sheet here: <https://support.atlassian.com/statuspage/docs/css-and-javascript-snippets-for-customizations/>  

Unfortunately helping with custom code is out of our support scope so If you have any developers on hand, it might be worth reaching out to them.   

Cheers,


author: Robert
body: Hi [@Bulusu Venkatesh](/t5/user/viewprofilepage/user-id/4457151) !

Do you mean the page switcher within manage.statuspage.io? Or is this a customization you've applied to the Statuspage itself?

Could you clarify which page is refreshing and the action you're taking?

Thank you!


Tags: cloud
component codes
Asked by First Last:

I am signing up multiple clients to our status page and would like to understand the mechanism to sign up one email to multiple component codes when doing a .csv mass upload


Answers:
author: Chris DeGidio
body: Hello there,

We document the mechanism of importing via CSV here: <https://support.atlassian.com/statuspage/docs/import-subscribers-via-csv/>

Under "Component codes field (optional)" you will find the instructions on setting the components each subscriber should have.

Please let me know if this is not what you are after and we would be happy to provide some further insight. Thanks so much.

Regards,

Chris


Tags: cloud
Can I create a component name on the status page with special char
Asked by murtaza.bhatia:

Can I create a component name on the status page with special char like e.g. below

Halo Jira (Planning \& Service desk)

Do we have any naming standards for component name?


Answers:
author: Craig Castle-Mead
body: Hi [@murtaza.bhatia](/t5/user/viewprofilepage/user-id/4437451)

I just tried to create "Halo Jira (Planning \& Service desk) " as a component in our Statuspage and the component did create as expected.

I was also able to create a component full of random emojis (???????????????) and non-latin character languages - so it seems like there's full 4 byte character support. Best way to know for sure - try it!

CCM

comments: author: murtaza.bhatia
body: Wow great test stuff you did amazing!!

By the way I was looking for some naming standards in Status page

Halo Jira (Planning \& Service desk) string is not supported I guess by other integration app like Opsgenie

I was trying to update this component via alert of opsgenie through tags, after some test i figured out its not supported


Tags: cloud
Room Name
Asked by Tugo:

every name I try to put in the channel to integrate the error slack, even  
putting # capital or lower case letter.


Answers:
author: Daniel Eads
body: Hi [@Tugo](/t5/user/viewprofilepage/user-id/4480819) ,

This error can occur when the Slack channel doesn't exist. The link here does not create a channel in Slack. It adds notifications to an existing channel.

Let me know if things are solved for you by using an already-created Slack channel in the Slack workspace your webhook is set up on.

Thanks,  
Daniel


author: Nic Brough -Adaptavist-
body: Could you give us an example, tell us exactly where you are putting the name in, and show us the errors you are getting?

comments: author: Tugo
body: ![Erro.png](https://community.atlassian.com/t5/image/serverpage/image-id/151803iC0F189AA94B0D4ED/image-size/large?v=v2&px=999 "Erro.png")

o Erro apresenta nessa tela , todo nome colocado de toda as formas poss?veis da erro, o nome do canal a ser definido ? para aparecer no slack, por?m sempre da essa mensagem de erro " "ERRO"  
Nome da Sala Caramba! parece que o nome da sala que voc? forneceu ? inv?lido. "


Tags: cloud