All Apps and Add-ons

Workflows or Ideas for Using Jira with Splunk ES/Phantom?

mathurin68
Observer

We are starting to get workflows for Jira/Confluence up and running and we purchased Splunk Enterprise Security/Phantom.  

I was just looking for ideas on workflows between the 3?  To make the best use of all of them, and of course,  the least amount of work for myself and my team.  Although I don't mind doing a lot of the work up front if I see it's going to help down the road.   

Thank you!!

 

Labels (1)
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @mathurin68 

Splunk ES/ Phantom are security products and for Automation. Would you be able to explain how you want to use Jira with them is it source of your data?

 

0 Karma

mathurin68
Observer

Hey @venkatasri !

So that's kind of my question... I get what they are. I'm looking for workflows and just to see how other organizations are using all of them.  

If another organization has a successful 'workflow', I'd like to see if we can use it in our own organization, rather than re-invent the wheel.  

I know Phantom has a Jira Add-On-

Jira_Phantom.png

 

I'm looking for ideas on using all 3... just as a really simple example, 

1) Detecting an incident with Splunk Enterprise(or other security tool) 

2) Ticket created for this Detection in Jira

3) Whatever can be automated through incident use Phantom. 

4) Phantom continues to update ticket(status, add comment, etc) 

... I already know it would probably be something along those lines. 

Just looking for ideas on how anyone else is using all three, but specifically Jira and Phantom.  I'd take any use cases. 

 

 

Thank you!

 

 

 

 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...