Hello everyone, I want to configure Jira ticketing tool for SOC team, can anyone suggest any documents or steps to configure the perfect ticketing system. our siem connector not in the jira operation integration section, so we are planning to use N8N intermediate of the siem and jira.
Hi @James Bond ,
I have encountered a similar problem when I had to integrate our SIEM with Jira, but our SIEM did not have a native connector with Jira.
What I have done in the past, which has worked, is to first set up Jira. I have created a project in Jira, which is a JSM project, and have created different issue types, like Security Incident and Alerts, and have added some important details like severity, source, IP, etc.
Coming to the integration part, I have set up the SIEM to send the alerts to N8N using a webhook. In N8N, I have mapped the details, transformed them, and have used the Jira REST API to create tickets in Jira.
This has worked for me, and I have had full control even though I did not have a native connector.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.