Jira Service Management Logstash Plugin

1. Download the Logstash plugin.
   The plugin is entirely free and open-source. It's under the Apache 2.0 license, so you can use it in the way that best suits your needs.

2. Install and run the Jira Service Management output plugin in Logstash:

3. For Logstash 5.4+
   bin/logstash-plugin install logstash-output-jsm

4. For other versions
   bin/plugin install logstash-output-jsm

5. Add a Logstash integration in Jira Service Management and copy the API key.
   :warning: If the feature isn’t available on your site, keep checking Jira Service Management for updates.

6. Use plugins such as Mutate to populate the fields that logstash-output-jsm will use.

filter {
    mutate {
       add_field => {
          "jsmAction" => "create"
          "alias" => "neo123"
          "description" => "Every alert needs a description"
          "actions" => ["Restart", "AnExampleAction"]
          "tags" => ["OverwriteQuietHours","Critical"]
          "[details][prop1]" => "val1"
          "[details][prop2]" => "val2"
          "entity" => "An example entity"
          "priority" => "P4"
          "source" => "custom source"
          "user" => "custom user"
          "note" => "alert is created"
       }
    }
    ruby {
        code => "event.set('teams', [{'name' => 'Integration'}, {'name' => 'Platform'}])"
    }
}

1. Add the following to your configuration file and enter the integration API key you copied earlier into apiKey.

   output {
   jsm {
   "apiKey" => "logstash_integration_api_key"
   }
   }
   

2. Run Logstash.