Atlassian standardizes security logs to combine threat signals

Atlassian has standardized security logs on the Open Cybersecurity Schema Framework and built a shared data platform on Databricks, the companies said in a case study. Its pipeline absorbs 44 billion events daily; common fields let analysts query different sources together and combine related findings into a single alert. The team also automated log onboarding through a workflow that generates mappings, tests them and deploys a trial configuration before production. Changes still undergo review and regression testing. Databricks reports that table optimization reduced a representative query from approximately 45 seconds to 2-3 seconds. Atlassian's workflow retains a trial environment and an observation period before promoting changes to production.