Device Security
Send Security Alerts to Jira Cloud
Table of Contents
Send Security Alerts to Jira Cloud
Send individual security alerts from Device Security to Jira Cloud to create
tickets for tracking and resolution.
From Device Security, you can send an individual security alert to
Jira Cloud either by selecting the check box of an alert on the Alerts
inventory page or from the Alert Details page. Before forwarding the alert to
Jira, Cortex XSOAR converts it into a
Jira ticket. The Jira ticket gets created in the
Jira project, as the specified issue type, that you
configured in the integration instance.
From there, the Jira ticket can be assigned and modified in the
same way as other Jira tickets.
To bulk create Jira tickets for security alerts,
Set up Device Security and Cortex XSOAR for Jira Cloud Integration
and configure a job with the
Create PANW IoT Alert and Vulnerability Jira Tickets - Jira Integration
playbook.
After closing the Jira ticket with the status "Done," you can run the Update PANW IoT Alert and Vulnerabilities - Jira Integration playbook to resolve the alert in Device Security.
- Log in to Device Security and select to find the alert that you want to send to Jira Cloud.Alerts Inventory From the Alerts inventory, select the checkbox for the alert you want to send, and then click .Alert Details From the Alerts inventory, click on the name of the alert to go to the Alert Details page, and then click .The Send to Jira dialog appears.Optional Enter a label if you want to add a Jira label to the ticket.Add a comment for the Jira ticket.This comment appears in both the Jira ticket and in the event history on the Alert Details and Device Details pages in Device Security.Send the alert to Jira Cloud.After you click Send, a link appears in the dialog. When you click it, a new browser window opens to the Cortex XSOAR playbook for this action.To confirm that the alert was sent, click the link to the Cortex XSOAR playbook for this action.The green boxes in the playbook indicate that a particular step was successfully performed. Following the path through the playbook gives you feedback about whether an action was carried out successfully or, if not, where the process failed.If the alert was sent successfully, you can view the alert event log on the Alert Details page to see the Jira ticket ID.
