All Apps and Add-ons

Workflows or Ideas for Using Jira with Splunk ES/Phantom?


We are starting to get workflows for Jira/Confluence up and running and we purchased Splunk Enterprise Security/Phantom.  

I was just looking for ideas on workflows between the 3?  To make the best use of all of them, and of course,  the least amount of work for myself and my team.  Although I don't mind doing a lot of the work up front if I see it's going to help down the road.   

Thank you!!


Labels (1)
0 Karma


Hi @mathurin68 

Splunk ES/ Phantom are security products and for Automation. Would you be able to explain how you want to use Jira with them is it source of your data?


0 Karma


Hey @venkatasri !

So that's kind of my question... I get what they are. I'm looking for workflows and just to see how other organizations are using all of them.  

If another organization has a successful 'workflow', I'd like to see if we can use it in our own organization, rather than re-invent the wheel.  

I know Phantom has a Jira Add-On-



I'm looking for ideas on using all 3... just as a really simple example, 

1) Detecting an incident with Splunk Enterprise(or other security tool) 

2) Ticket created for this Detection in Jira

3) Whatever can be automated through incident use Phantom. 

4) Phantom continues to update ticket(status, add comment, etc) 

... I already know it would probably be something along those lines. 

Just looking for ideas on how anyone else is using all three, but specifically Jira and Phantom.  I'd take any use cases. 



Thank you!





0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2023 Splunk Career Impact Report

We’ve been shouting it from the rooftops! The findings from the 2023 Splunk Career Impact Report showing that ...

Splunk Lantern | Getting Started with Edge Processor, Machine Learning Toolkit ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...