Adding Splunk Server Connections to JSD Server

Prerequisites

• Obtain administrator access to JSD and Splunk.
• Install and configure the JSD add-on.

Installing the Splunk App

1. Log in to your Splunk server as an admin.
2. Install the JIRA Service Desk Add-on for Splunk app and restart Splunk.
3. Go to Settings > Data Inputs > HTTP Event Collector > Global Settings.
4. Beside All Tokens, click Enabled.
   This setting enables the HTTP Event Collector (HEC) for your Splunk server.
5. Go to Settings > Data Inputs, and click HTTP Event Collector.
6. Click Add new, and complete the following fields.
   • Name — enter a descriptive name, such as JSD Event Collector.
   • Source type — select atlassian:jiraservicedesk:ticket:json.
   • Index — select the indexes where you want to send events. The recommended index is main.
   • Ensure the Enable indexer acknowledgement check box is not selected.
7. Click Review, and then click Submit.
8. Locate the event collector you created, and obtain the URL and security token for it.
   You will use this information to set up the connection to Splunk in JSD.
9. Repeat steps 1 – 9 for every Splunk server you want to connect to JSD.

Configuring JSD

1. In JSD, click the gear icon, and then click Applications.
2. Under Integrations, click RealTime Splunk Connector for JIRA.

3. Click the Splunk Servers tab.

4. Click the plus icon .

5. On the Add Splunk Server page, enter the connection details for the Splunk server. 
   

   Field	Description
   Name	User-friendly name for this Splunk server connection in Jira. For example: Acme-EAST.
   URL	URL to the base Splunk server with the API port in the format: https://<host>:<port> For example: https://splunk.acme.com:8088
   Token	Splunk security token to use in the authorization header. You can find this once you create your HTTP event collector in Splunk. For example: ABA2EE20-8516-45B7082210F0A5D4610D88.

6. Click Save Splunk.
7. Repeat steps 3 – 7 for every Splunk server you want to connect to JSD.
   

Refreshing the list

To retry the connection and update the page with the latest status, click the Refresh icon ().

Next Steps

• Configure registrations between JSD projects and Splunk servers.
• Activate the Splunk server connections.