Sending Reports to Jira

Jira is a platform that combines issue collection and agile project management capabilities. You can configure CloudGuard to send findings to Jira with an HTTP endpoint.

  1. In Jira, create an account.

  2. For this account, create a token for API requests.

Best Practice - Check Point recommends to create a new Jira account to securely use its credentials in the configuration below.

  1. In the CloudGuard portal, from the left menu, select Integration Hub.

  2. In the Ticketing Systems section, click Jira.

  3. In the Jira sliding menu, click Add to create a new integration.

  4. Enter these details:

    • Name to identify the integration

    • Endpoint URL - your Jira domain URL

    • Username - email of your Jira account

    • Password - API token created in Step 1

  5. Select the option Ignore certificate validation if you work with self-signed certificates. This state is typical only for development and integration environments and is not recommended for production environments.

  6. Click Save.

  1. Create or edit a notification. For more information, see Notifications.

  2. In the Immediate Notification section, select HTTP endpoint notification per newly created finding.

  3. Select Jira.

  4. From the list, select a Jira configuration.

  5. Configure the Json Payload.

    The section below the Jira configuration contains a JSONClosed JavaScript Object Notation. A lightweight data interchange format. template that represents your ticket template in Jira. On the left side, use the expressions from the list on the right. These expressions are replaced with the alert data after evaluation of the cloud entity.

    You can fill the built-in Jira fields with values when you add them to the JSON payload (in the API example, Labels takes an array of values). Custom Jira fields are not accessed with their names directly, but through the format “customfield_#####”. For more information, see the REST API example.

    Important - You must configure:

    • in the project object, the project name for the key parameter

    • in the issuetype object, the ticket type name for the name parameter

    (WJIT and Bug in the example below, respectively).

  6. Click Verify syntax to verify the integration.

  7. Click Test to test the integration.

  8. Finish creating the notification.

  9. Add the notification to a policy. For more information, see Configuring CloudGuard Policies.