About mikerennie

mikerennie · ‎08-14-2023

Does the 'Add-on for Atlassian JIRA Service Desk alert action' (https://splunkbase.splunk.com/app/4958) allow you to "auto-map" the varied values coming from the SplunkES alert to specific fields in Jira? As an example, we would like to auto map/populate ${source_ip}$ to the 'Source IP' field in the Jira record. Thank you, Mike

Mallikarjuna · ‎02-23-2023

probably posting url is not ok @Mike.

mikerennie · ‎02-23-2023

Thanks Mallikarjuna!

mikerennie · ‎12-15-2022

Got it, thanks Matt!

mikerennie · ‎12-15-2022

Thanks Matt! I plan on using Mission Control as our ticketing system solution, but having that integration may be a great transitional step.

kavitav · ‎12-01-2022

Hi Mike, Hmm I haven't received it - can you resend to kvaradarajan@splunk.com? Thanks, Kavita

msayar · ‎09-13-2022

Yes it is! One of the main goals for MC is to be a one-stop-shop providing an analyst all the information they need to make a decision on how to respond to incidents. Part of that goal is enriching the incident with information from various sources. You'll see that coming as Mission Control continues to evolve. If you'd like more information, feel free to reach out to your account team for a roadmap review

kavitav · ‎09-09-2022

@mikerennie The Incident Type Matching Macro points to an overall macro which will determine incident type of the incident. This is to facilitate hierarchy of conditions across incident types. Therefore the query must define each incident type, not just the one being edited currently. We recognize that this is actually not intuitive in the current UI and will be working to update this. Thanks for calling it out! A sample is below: eval incident_type=case(risk_event_count>20, "incident_type_1", urgency=="medium", "incident_type_2") Let us know if this is helpful. Happy to jump on a call to talk more!

Posts	17
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎08-29-2022

Online Status	Offline
Date Last Visited	‎08-14-2023 05:05 PM

Incident Field Mapping with Add-on for Atlassian J...

Mission Control: "Error: Data migration tasks fail...

Built-in SOAR instance- Do we have 100 actions per...

Is there a filter or can I create one so that I ca...

Mission Control: Can you send Incidents to another...

Are there limited SOAR functions in Preview 2 if y...

Asset context and/or integration with asset manage...

Incident Type and Response Task not auto assigned ...

Incident Field Mapping with Add-on for Atlassian J...

Re: Built-in SOAR instance- Do we have 100 actions...

Re: Mission Control: "Error: Data migration tasks ...

Re: Is there a filter or can I create one so that ...

Re: Mission Control: Can you send Incidents to ano...

Re: Preview 2 & limited SOAR functions

Re: Asset context and/or integration with asset ma...

Re: Incident Type and Response Task not auto assig...

Join the Conversation