Configuring the JIRA Service Desk Cloud Add-On

Prerequisites

• Cloud version of JSD.
• Administrator access to JSD and Splunk.

Installing the Splunk App

1. Log in to your Splunk server as an admin.
2. Install the JIRA Service Desk Add-on for Splunk app and restart Splunk.
3. Go to Settings > Data Inputs > HTTP Event Collector > Global Settings.
4. Beside All Tokens, click Enabled.
   This setting enables the HTTP Event Collector (HEC) for your Splunk server.
5. Go to Settings > Data Inputs, and click HTTP Event Collector.
6. Click Add new, and complete the following fields.
   • Name — enter a descriptive name, such as JSD Event Collector.
   • Source type — select atlassian:jiraservicedesk:ticket:json.
   • Index — select the indexes where you want to send events. The recommended index is main.
   • Ensure the Enable indexer acknowledgement check box is not selected.
7. Click Review, and then click Submit.
8. Locate the event collector you created, and obtain the URL and security token for it.
   You will use this information to set up the connection to Splunk in JSD.
9. Repeat steps 1 – 9 for every Splunk server you want to connect to JSD.

Installing the JSD Add-On

1. Log in to your JSD instance as an admin.

2. Click the gear icon, and then click Add-ons.

3. Search the Marketplace for Forty8Fifty Real-Time Splunk Connector for JIRA Service Desk.

4. Follow the on-screen instructions to buy the add-on or start the free trial for 30 days.

Using the Setup Wizard

Use the setup wizard to connect a Splunk server, configure a registration between JSD projects and the Splunk server, and send historical JSD ticket data to Splunk.

1. From the JSD add-ons administration page, expand the listing for RealTime Splunk Connector for JSD and click Get Started.
   
   
   

2. On the Add Splunk Server page, enter the connection details for the Splunk server where you want to send issues.
   

   Field	Description
   Name	User-friendly name for this Splunk server connection in Jira. For example: Acme-EAST.
   URL	URL to the base Splunk server with the API port in the format: https://<host>:<port> For example: https://splunk.acme.com:8088
   Token	Splunk security token to use in the authorization header. You can find this once you create your HTTP event collector in Splunk. For example: ABA2EE20-8516-45B7082210F0A5D4610D88.

3. Click Save & Continue.
   Alternatively, click Cancel to skip this step. You can add Splunk servers to JSD later.
   
   

4. On the Create Registration page, associate specific projects in JSD with the Splunk server and determine when to automatically send issues. 
   

   Field	Description
   Projects	Add any combination of projects for which you want to send issues to a Splunk server.
   Splunks	Add any combination of Splunk servers to receive issues from the selected projects.
   Events	Select which events will trigger the add-on to automatically send Jira data to the Splunk servers. For example, if you want Jira to send data to the selected Splunk servers whenever an issue in one of the selected projects is updated, select the Issue Updated check box.

   
   

   To select consecutive projects, press Shift and then click the first and the last project. To select non-consecutive projects, press Control (Windows) or Command (Mac) and then click the desired projects.

5. Click Save & Continue.
   Alternatively, click Cancel to skip this step. You can add registrations later.
    

6. On the Create a Sync Range page, specify what historical data to send to Splunk for baseline analysis. 
   

   Field	Description
   From Date	Select the starting date of the time period.
   To Date	Select the ending date of the time period.
   Send Duplicates	(Optional) Select the check box to resend data that was already sent with another sync range. You may want to use this option if your previous data has been deleted or your configuration settings have changed. Leave the check box cleared to send only data that has not been sent previously.

   
   

7. Click Save.
   Alternatively, click Cancel to skip this step. You can add sync ranges later.

Next Steps

• Verify and monitor Splunk connectivity.
• Install and configure the Splunk app.
• (Optional) Install and configure the HipChat add-on.