Exporting Findings

Security for Confluence allows users to export CSV files containing scan findings in the spaces for which they have administration privileges, or spaces that users granted explicit app access can view. This can be done from the Soteri Dashboard, or when viewing a particular space’s Security Analysis.

Exporting all scan findings from the Dashboard

To export all findings for all spaces you can see on the Dashboard, click the Export button at the top of the Soteri Dashboard, and select All Findings:

Archived spaces are excluded from the exports by default. When on, the toggle will include them.

Exporting space findings from the Dashboard

To export findings for a particular space from the Soteri Dashboard, use the Findings button in the Action Menu for the space:

Exporting space findings from the Security Analysis page

When viewing the Security Analysis for a particular space, you can use the Export Space dropdown at the top of the page. The rule filter will also filter the exported findings.

Full findings in exported reports

If you want to add the full text of findings in exported reports, you can enable the Include full finding text in exported reports setting on the settings page:

Enabling this option will add the Content Title, Historical, Finding text, Labeled?, Full text, Introduced by, and Introduced by account ID columns to CSV exports.

Performance

Security for Confluence only stores the locations of findings, not their actual text. To perform an export, Security for Confluence therefore must query Confluence to retrieve the text of all content with findings, which can be very time consuming. This is particularly noticeable for full instance exports. A large full instance export can take hours, depending on Atlassian rate limits.

Columns in exported findings reports

Following are the column names in the exported reports, in order, most of which are self-explanatory:

1. Space key

2. Content title. Excluded if the “Include full finding text in exported reports” setting is disabled.

3. Content ID

4. Latest content version

5. Historical: if this scan finding is historical. Excluded if the “Include full finding text in exported reports” setting is disabled.

6. Rule name

7. Confidence: for findings from Advanced AI Scanning, the confidence level reported by the model (0.0-1.0).

8. Finding text: the exact match text of the finding. This can be used to review the finding; see Hiding false positives, revoked credentials, etc.. Excluded if the “Include full finding text in exported reports” setting is disabled.

9. Reviewed?: if the finding is reviewed at space scope.

10. Individually reviewed?: if the finding is reviewed at content scope.

11. Globally reviewed?: if the finding is reviewed across all of Confluence.

12. Labeled?: if the finding has the soteri-finding label. Excluded if the “Include full finding text in exported reports” setting is disabled.

13. Publication time

14. Content link: URL to the content.

15. Security analysis link: URL to security analysis page for that Space.

16. Full text: the complete text of the fragment, or, if it is too long, then only the specific text that triggered the finding. Excluded if the “Include full finding text in exported reports” setting is disabled.

17. Introduced by: The user the finding is attributed to. Excluded if the “Include full finding text in exported reports” setting is disabled.

18. Introduced by account ID: The Atlassian account ID the finding is attributed to. Excluded if the “Include full finding text in exported reports” setting is disabled.

More Export Settings

More settings for configuring and filtering export output are available via our REST API.