Field missing in ce.logs in SonarQube 10.5.1 Enterprise Version

[sreeram (Sreeram S)]

SonarQube version: 10.5.1 Enterprise License
Deployed: Zip
Trying to achieve: Trying to find out which user has triggered the scan for a project.

Hey SonarSource Community !

In version 9.9LTS there is a field named “submitter” which conveys which user has triggered the scan.
After upgrade to 10.5.1 this field is missing in the logs.
Can we find this information is some other logs?

Was is deliberately removed from storing it in logs ?

Thanks in advance for your help !

Regards,
Sreeram

[Colin]

Hey ther.e

It’s still there for me!

2024.05.22 16:18:17 INFO ce[][o.s.c.t.CeWorkerImpl] Execute task | project=org.sonarqube:sonar-scanner | type=REPORT | id=8ce60b11-5a04-4280-a292-527866e8ef18 | submitter=admin

What are you seeing?

[sreeram (Sreeram S)]

Hi Colin,

I now see the same result as it was earlier, with the submitter name.
Is it because I updated it to latest version, after which no scans were yet done ?

Earlier the output was:

2024.05.21 06:00:06 INFO  ce[][o.s.c.t.CeWorkerImpl] Execute task | project=com.nagra:sree_sonarscanner | type=REPORT | id=19d36aff-71eb-402e-916a-778e395cf0a8

Thanks for the response !

[Colin]

Hey there.

Digging in a bit more, it looks like if you allow anonymous access on your SonarQube server (global Administration > Security > Force user authentication) and have allow anyone to execute analysis (either globally or on a project), you can end up having no submitter logged.

2024.05.23 10:39:17 INFO ce[eb9d4ef4-b1ec-4466-962e-7c5a3d0dbfad][o.s.c.t.CeWorkerImpl] Executed task | project=org.sonarqube:sonar-scanner | type=REPORT | id=eb9d4ef4-b1ec-4466-962e-7c5a3d0dbfad | status=SUCCESS | time=11424ms

I expect SonarQube v9.9 LTS was acting the same way, and you just ran into an anonymous (unauthenticated) analysis when checking the logs.

[sreeram (Sreeram S)]

Hello,

Earlier in 9.9LTS, anonymous access is disabled and the server is not exposed to internet.

According to your findings, I assume that this would’ve been caused because of the database upgrade which happens after SonarQube Upgrade.(The starting logs of CE)
Since its a database update, the submitter would’ve been missing

Below is my findings:

2024.05.22 03:55:29 INFO  ce[c6974ad6-b8c6-452c-bb69-af87f51c6909][o.s.c.t.CeWorkerImpl] Executed task | type=AUDIT_PURGE | id=c6974ad6-b8c6-452c-bb69-af87f51c6909 | status=SUCCESS | time=143ms
2024.05.22 04:20:25 INFO  ce[][o.s.c.t.CeWorkerImpl] Execute task | project=com.nagra:das | type=REPORT | branch=fix/vulnerability | branchType=BRANCH | id=23d8567f-a294-4220-97c3-4178e99bc1aa | submitter=Sonaruser

After it was allowed for users to perform analysis, I see the submitter field in the logs.

Thanks for this valuable information !