Adding Splunk Server Connections to Jira Server

Prerequisites

• Obtain administrator access to Jira and Splunk.
• Install and configure the Jira add-on.

Installing the Splunk App

1. Log in to your Splunk server as an admin.
2. Install the JIRA Service Desk Add-on for Splunk app and restart Splunk.
3. Go to Settings > Data Inputs > HTTP Event Collector > Global Settings.
4. Beside All Tokens, click Enabled.
   This setting enables the HTTP Event Collector (HEC) for your Splunk server.
5. Go to Settings > Data Inputs, and click HTTP Event Collector.
6. Click Add new, and complete the following fields.
   • Name — enter a descriptive name, such as JSD Event Collector.
   • Source type — select atlassian:jiraservicedesk:ticket:json.
   • Index — select the indexes where you want to send events. The recommended index is main.
   • Ensure the Enable indexer acknowledgement check box is not selected.
7. Click Review, and then click Submit.
8. Locate the event collector you created, and obtain the URL and security token for it.
   You will use this information to set up the connection to Splunk in JSD.
9. Repeat steps 1 – 9 for every Splunk server you want to connect to JSD.

Configuring JSD

1. In Jira, click the gear icon, and then click Applications.
2. Under Integrations, click RealTime Splunk for Jira.

3. Click the Splunk Schemes tab.

4. Click Add.

5. On the Add Splunk Server page, enter the connection details for the Splunk server. 
   

   Field	Description
   Name	User-friendly name for this Splunk server connection in Jira. For example: Acme-EAST.
   URL	URL to the base Splunk server with the API port in the format: https://<host>:<port> For example: https://splunk.acme.com:8088
   Token	Splunk security token to use in the authorization header. You can find this once you create your HTTP event collector in Splunk. For example: ABA2EE20-8516-45B7082210F0A5D4610D88.

6. Click Add.
7. Repeat steps 3 – 7 for every Splunk server you want to connect to Jira.
   

Next Steps

• Configure registrations between Jira projects and Splunk servers.
• Activate the Splunk server connections.