Integrate JIRA Service Desk EventTracker v9.x and above

Publication Date: September 12, 2019

1

Integrate JIRA Service Desk

Abstract

This guide provides instructions to retrieve JIRA Service Desk event logs and integrate it with EventTracker.

Once EventTracker is configured to collect and parse these logs, dashboard and reports can be configured to

monitor JIRA Service Desk 7.x.

Audience

The configurations detailed in this guide are consistent with EventTracker version v9.x or above and JIRA

Service Desk.

The information contained in this document represents the current view of Netsurion on the issues

discussed as of the date of publication. Because Netsurion must respond to changing market

conditions, it should not be interpreted to be a commitment on the part of Netsurion, and Netsurion

cannot guarantee the accuracy of any information presented after the date of publication.

This document is for informational purposes only. Netsurion MAKES NO WARRANTIES, EXPRESS OR

IMPLIED, AS TO THE INFORMATION IN THIS DOCUMENT.

Complying with all applicable copyright laws is the responsibility of the user. Without limiting the

rights under copyright, this paper may be freely distributed without permission from Netsurion, if

its content is unaltered, nothing is added to the content and credit to Netsurion is provided.

Netsurion may have patents, patent applications, trademarks, copyrights, or other intellectual

property rights covering subject matter in this document. Except as expressly provided in any

written license agreement from Netsurion, the furnishing of this document does not give you any

license to these patents, trademarks, copyrights, or other intellectual property.

The example companies, organizations, products, people and events depicted herein are fictitious.

No association with any real company, organization, product, person or event is intended or should

be inferred.

© 2019 Netsurion. All rights reserved. The names of actual companies and products mentioned

herein may be the trademarks of their respective owners.

2

Integrate JIRA Service Desk

Table of Contents 1. Overview ............................................................................................................................................................ 3

2. Integrating JIRA Service Desk with EventTracker .............................................................................................. 3

2.1 Windows ...................................................................................................................................................... 3

3. EventTracker Knowledge Pack .......................................................................................................................... 4

3.1 Alerts............................................................................................................................................................ 4

3.2 Flex Reports ................................................................................................................................................. 4

3.3 Dashboards .................................................................................................................................................. 5

3.4 Saved Searches ............................................................................................................................................ 6

4. Importing JIRA Service Desk knowledge pack into EventTracker ..................................................................... 7

4.1 Alerts............................................................................................................................................................ 8

4.2 Knowledge Object ....................................................................................................................................... 9

4.3 Token template ......................................................................................................................................... 10

4.4 Flex Reports ............................................................................................................................................... 11

4.5 Category .................................................................................................................................................... 13

4.6 Dashboard ................................................................................................................................................. 14

5. Verifying JIRA Service Desk knowledge pack in EventTracker ........................................................................ 16

5.1 Alerts.......................................................................................................................................................... 16

5.2 Knowledge Object ..................................................................................................................................... 16

5.3 Token template ......................................................................................................................................... 17

5.4 Flex Reports ............................................................................................................................................... 18

5.5 Category .................................................................................................................................................... 19

5.6 Dashboard ................................................................................................................................................. 20

3

Integrate JIRA Service Desk

1. Overview Jira Service Desk is a help desk request tracker brought by Atlassian. With Jira Service Desk, you can easily

receive, track, manage, and resolve requests.

EventTracker integrates with JIRA Service Desk to track and monitor security events such as authentication

and login attempts.

2. Integrating JIRA Service Desk with EventTracker

2.1 Windows The steps provided below helps to configure the EventTracker to receive events from the JIRA Service Desk

1. Get the “JIRA Service Desk.exe” executable file from the EventTracker Support.

2. Once the executable application is downloaded, run the application with administrator privilege.

3. Select the log file path of the JIRA Service Desk.

Figure 1

4

Integrate JIRA Service Desk

4. You will receive a configuration successful message like shown below, once the configuration is complete.

Figure 2

3. EventTracker Knowledge Pack Once logs are received by EventTracker manager, Knowledge Packs can be configured into EventTracker.

The following Knowledge Packs are available in EventTracker to support JIRA Service Desk.

3.1 Alerts

• JIRA Service Desk - Login failed: This alert is generated when login failed event occurs, multiple login

failures may indicate a brute force attack.

3.2 Flex Reports

• JIRA Service Desk - Login logout activities: This report gives you information about the login-logout

activities along with the username, source IP address and session ID.

• JIRA Service Desk - Login failed: This report provides information about the login failed attempts. It

gives information about the user who’s login failed and the reason for the failure.

5

Integrate JIRA Service Desk

3.3 Dashboards

• JIRA Service Desk Login Failed Details

Figure 3

• JIRA Service Desk Authentication Details

Figure 4

6

Integrate JIRA Service Desk

• JIRA Service Desk Login Failed by Source IP Address

Figure 5

3.4 Saved Searches

• JIRA Service Desk - Login logout activities: This Saved Search gives information about the login-logout

activities, along with the username, source IP address and session ID.

• JIRA Service Desk - Login failed: This Saved Search provides information about the login failed attempts.

It gives information about the user who’s login failed and the reason for the failure.

7

Integrate JIRA Service Desk

4. Importing JIRA Service Desk knowledge pack into

EventTracker NOTE: Import knowledge pack items in the following sequence:

• Alerts.

• Knowledge Objects

• Token Template.

• Flex Reports.

• Categories.

• Dashboard.

1. Launch the EventTracker Control Panel.

2. Double click Export-Import Utility.

Figure 6

Figure 7

3. Click the Import tab.

8

Integrate JIRA Service Desk

4.1 Alerts 1. Click the Alert option, and then click the browse button.

2. Navigate to the location having a file with the extension “.isalt” and then click on the “Import” button:

Figure 8

3. EventTracker displays a success message:

Figure 9

9

Integrate JIRA Service Desk

4.2 Knowledge Object 1. Click Knowledge objects under the Admin option in the EventTracker manager page.

Figure 10

2. Click on the Import button. 3. Click on Browse.

Figure 11

4. Locate the file named KO_JIRA.etko.

5. Now select all the check box and then click on ‘Import’ option. 6. Knowledge objects are now imported successfully.

10

Integrate JIRA Service Desk

Figure 12

4.3 Token template 1. Click on the Parsing rule under the Admin option in the EventTracker manager page.

Figure 13

2. Select Template and click on the import icon in the top right corner.

Figure 14

3. Select the file type *.ettd(EventTracker template dashlets.)

4. Select all the JIRA Service Desk template name.

5. And click on the import icon

11

Integrate JIRA Service Desk

Figure 15

6. Template(s) imported successfully.

Figure 16

4.4 Flex Reports 1. In the EventTracker control panel, select “Export/ Import utility” and select the “Import tab”. Then

click Reports option, and choose “New (*.etcrx)”:

12

Integrate JIRA Service Desk

Figure 17

2. Once “New (*.etcrx)” is selected, a new pop-up window appears. Click the “Select File” button and

navigate to the file path with a file having the extension “.etcrx”.

3. Select all the relevant files and then click Import button.

4. EventTracker displays a success message:

Figure 18

13

Integrate JIRA Service Desk

4.5 Category 1. Click the Category option, and then click the browse button.

Figure 19

2. Locate the Category_JIRA Service Desk.iscat file, and then click the open button.

3. To import category, click the Import button.

4. EventTracker displays a success message.

Figure 20

4. Click the OK button, and then click the Close button.

14

Integrate JIRA Service Desk

4.6 Dashboard 1. Login to EventTracker.

2. Navigate to Dashboard → My Dashboard.

3. In “My Dashboard”, click Import Button:

Figure 21

Figure 22

4. Select the Browse button and navigate to the file path where the dashboard file is saved and click on

the “Upload” button.

5. Once completed, choose “Select All” and click on “Import” Button.

6. Next, click “Customize dashlet” button as shown below:

15

Integrate JIRA Service Desk

Figure 23

7. Now, put a text on the Search bar: “JIRA Service Desk” and then select the JIRA Service Desk dashlets

and then click the “Add” button.

Figure 24

16

Integrate JIRA Service Desk

5. Verifying JIRA Service Desk knowledge pack in

EventTracker

5.1 Alerts 1. In the EventTracker web interface, click the Admin dropdown, and then click Alerts.

2. In search box enter “JIRA Service Desk” and then click the Search button.

3. EventTracker displays an alert related to “JIRA Service Desk”

Figure 25

5.2 Knowledge Object 1. Click Knowledge objects under the Admin option in the EventTracker manager page.

Figure 26

17

Integrate JIRA Service Desk

2. In the Knowledge Object tree, expand the JIRA Service Desk group folder to view the imported

Knowledge objects.

Figure 27

5.3 Token template

1. Click on Parsing rules under Admin .

Figure 28

2. Select template under parsing rules and select JIRA Service Desk group.

3. All the templates are present under JIRA Service Desk.

18

Integrate JIRA Service Desk

Figure 29

5.4 Flex Reports 1. In the EventTracker web interface, click the Reports menu, and then select the Report Configuration.

Figure 30

2. In Reports Configuration pane, select the Defined option.

3. Click on the JIRA Service Desk group folder to view the imported reports.

Figure 31

19

Integrate JIRA Service Desk

5.5 Category 1. Login to EventTracker.

2. Click the Admin menu, and then click Category.

Figure 32

3. Click the search, and then search with JIRA Service Desk.

Figure 33

20

Integrate JIRA Service Desk

5.6 Dashboard 1. In the EventTracker web interface, Click on Home Button and select “My Dashboard”.

Figure 34

2. In “JIRA Service Desk” dashboard you should be now able to see something like this

Figure 35