Configuring Splunk to Open Jira Server Tickets
You can configure Splunk to automatically open a ticket in Jira when a saved search generates an alert.
Prerequisites
Obtain administrator access to Splunk.
Procedure
To automatically create Jira tickets from Splunk alerts, add an action to the alert in Splunk.
From the Alerts page, click Open in Search beside the desired alert.
Alternatively, run a new search.Ensure the following condition is included in the search:
where isnull(self)
For example:index=* "FATAL" | where isnull(self)This condition excludes the new JSD ticket from subsequent searches, ensuring that Splunk opens only one ticket each time the alert is triggered.
Go to Save As > Alert.
At the bottom of the window, click Add Actions, and then select JIRA Service Desk Ticket.
Enter the connection details, and click Save.
The next time the search generates an alert, it will automatically create a ticket in your JSD instance.