@Bosv0id - Basically, this feature helps automatically resolve the on Jira as well when the issue seems to be resolved from the alert side. So, you need to have logic in your alert query which gives you following fields/information Auto close key value pair Whether the issue is there or resolved (concept is well described in this App - https://splunkbase.splunk.com/app/7016) When this key value pair is found in the result, it means it is a resolved alert and not a trigger alert  Auto close issue number field name In case of a Jira ticket to be resolved, you need to provide the Jira ticket number to be resolved. This needs to be present in the results as a field. This field would be empty in case the issue is triggered (not resolved) Auto close status transition value What is the close status of Jira in your project Auto-close comment If you want to add a comment while closing the ticket.   I hope this helps!!! Kindly upvote if it does!!! ... View more