Create And Update Jira Issue

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

This playbook will create or update incident in Jira. When incident is created, playbook will run and create issue in Jira. When incident is updated, playbook will run and add update to comment section.

Attribute	Value
Type	Playbook
Solution	AtlassianJiraAudit
Source	View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action	Type	Connections	Actions
`azuresentinel`	Managed	1	0
`jira`	Managed	1	2
`microsoftsentinel`	Managed	0	1

Action parameters (URLs, paths, function IDs)

`jira` (Managed)

Action	Method	Endpoint	Other
Create_a_new_issue	post	`/issue`	—
Add_comment	post	`/issue/@{encodeURIComponent(variables('Jira ID'))}/comment`	—

`microsoftsentinel` (Managed)

Action	Method	Endpoint	Other
Update_incident	put	`/Incidents`	—

Additional Documentation

📄 Source: Jira-CreateAndUpdateIssue/readme.md

Jira-CreateAndUpdateIssue

author: Benjamin Kovacevic

Prerequisites

We will need following data to make Jira connector:

Jira instance (ex. xyz.atlassian.net)
Jira API (create API token on https://id.atlassian.com/manage-profile/security/api-tokens)
User email

Quick Deployment

Post-deployment

Authorize Jira connector and choose:

Jira Project (where you want to sync Microsoft Sentinel incidents to) and
Issue Type Id (Microsoft Sentinel incident issue type in Jira - Task, Story, Bug,...).

Assign Microsoft Sentinel Responder role to playbook's managed identity. To do so, choose Identity blade under Settings of the Logic App.
Add playbook as an action to the automation rule, ex.: