| Info |
|---|
This guide explains how to add a Jira account to Cloudaware and configure actions for Cloudaware to automatically discover Jira issues in the CMDB and/or create issues in Jira based on specified criteria. |
...
Auto-discovery of issues related to CMDB objects and importing them from Jira to Cloudaware
Creating a Jira issue whenever any specific criteria are met in Cloudaware (e.g. new incident, policy violation, vulnerability scan, etc.) and posting a comment to the existing Jira issue (, e.g. new vulnerability has been detected as fixed, etc.)
...
Configure auto-discovery and import of Jira issues to Cloudaware CMDB
Add Jira account to Cloudaware
Cloudaware can discover Jira issues and automatically associate them with corresponding CMDB objects.
...
...
Add Jira account
...
to Cloudaware
...
...
1. Log in to Cloudaware account → Admin
...
.
...
Find Jira Accounts & Actions in the list of Cloud Integrations
...
. Click +Add
...
.
...
Fill
...
out the form:
WHERE
*URL - insert
...
the Jira URL from the browser address bar, e.g.
...
https://jira.cloudaware.com
**Password - use a token instead of a password if you are using cloud version of Jira
Ensure that the user whose credentials are used in the form has the appropriate level of access. All Jira projects that are visible for this user will be collected by Cloudaware.
***Trust Certificate - check this box only if your Jira runs on a private network and TunHub Gatewaygateway has been set up by Cloudaware
4
Click Save.
The green light in 'Status' means your Jira account has been successfully added. If there is a red light, please contact support@cloudaware.com
...
Add custom fields to Jira
For Cloudaware to will automatically associate a discovered Jira issue issues with a CMDB object, a Jira issue should have two custom fieldscorresponding CMDB objects using custom fields. Add the following custom fields* in Jira:
Object Type
Object Identifier
...
In order to view a list of CMDB objects, navigate to Setup → type Objects in the Quick search bar.
...
| Note |
|---|
*The custom Jira field you create should be a text/string. |
...
Manage permissions and create fields in Jira
1. Grant Cloudaware with user/project: ADD_COMMENTS permission (see Jira documentation).
2. Log in to Cloudaware account → Setup → Objects.
3. Select an object you want Jira issues to be created for (in this example, CloudAware Vulnerability Scan).
4. Review the section 'Custom Fields & Relationships' to define fields that should be displayed in an issue's description. In our use case we are using the following fields: Priority, Risk, Severity, CVSS Number, Host, Port, Protocol, Description, Disappearance Time.
| Note |
|---|
Use Cloudaware Field Label names when creating fields in your Jira as fields names MUST match. |
Set up Jira Actions in Cloudaware
| Anchor | ||||
|---|---|---|---|---|
|
...
Field List - determine the fields you'd like to be displayed in a Jira issue and Cloudaware comment.
| Note |
|---|
Use API names for fields. The integration must include all the fields you plan to use in notifications. The order you choose for the fields will be reflected in a Jira issue. |
Click Save.
5. Copy and save the URL as it is required for further configuration in Cloudaware.
...
Configuring Cloudaware workflows to create issues and post comments in Jira
| Anchor | ||||
|---|---|---|---|---|
|
Once you have configured Jira Action, set up two different workflow rules － for creating a Jira issue (1) and adding a comment (2).
1. Workflow Rule for Jira issue creation:
...
Click Save&Next.
Add Workflow Action → New Outbound Message:
Object: CloudAware Vulnerability Scan
Name: Jira Notification: New Vulnerability Detected
Endpoint URL: paste the URL copied from the integration's details
Select the fields to be displayed as set up in the Integration details:
...
Note that Name is a mandatory field.
Click Done. Click Activate to activate your workflow.
2. Workflow Rule for posting a comment in Jira issue:
...
Object: CloudAware Vulnerability Scan
Name: Jira Notification: Vulnerability Fixed
Endpoint URL: paste the URL copied from the integration's details
Select the fields to be displayed as set up in the Integration details:
...
Click Done. Click Activate to activate your workflow.
Jira issue sample | Cloudaware comment sample |
|---|---|
 |  |
...
Bulk close Jira issues with Cloudaware comments
Based on our use case, we can consider all issues with a comment as not requiring further actions since a vulnerability the Jira issue informs of has been fixed.
Follow these steps to configure automatic change of issue status to 'Resolved':
In your Service Desk project select Project settings → Automation.
Select Add rule.
Select Custom rule from the list, then select Next.
Give your custom rule a name and a description.
Configure your rule by defining the WHEN, IF, and THEN fields:
5.1. When comment added
5.2. If comment contains This vulnerability is fixed and deleted on
5.3. Then transition issue to status "Resolved"
...
Populate custom fields in Jira
...
| Anchor | ||||
|---|---|---|---|---|
|
This option requires having custom fields Object Type, Object Identifier and fields that were created for Jira actions.
Based on our use case, we can consider having all custom field values populated automatically. This will also provide a great visibility in Cloudaware CMDB as each Jira issue will be linked to a CMDB record.
...