Log in to your Splunk server as an admin.
Install the JIRA Service Desk Add-on for Splunk app and restart Splunk.
Go to Settings > Data Inputs > HTTP Event Collector > Global Settings.
Beside All Tokens, click Enabled.
This setting enables the HTTP Event Collector (HEC) for your Splunk server.
Go to Settings > Data Inputs, and click HTTP Event Collector.
Click Add new, and complete the following fields.
- Name — enter a descriptive name, such as JSD Event Collector.
- Source type — select atlassian:jiraservicedesk:ticket:json.
- Index — select the indexes where you want to send events. The recommended index is main.
- Ensure the Enable indexer acknowledgement check box is not selected.
Click Review, and then click Submit.
Locate the event collector you created, and obtain the URL and security token for it.
You will use this information to set up the connection to Splunk in JSD.
Repeat steps 1 – 9 for every Splunk server you want to connect to JSD.

Browser not supported