{
  "name": "atlassian_jira",
  "title": "Atlassian Jira",
  "version": "1.34.1",
  "release": "ga",
  "description": "Collect logs from Atlassian Jira with Elastic Agent.",
  "type": "integration",
  "download": "/epr/atlassian_jira/atlassian_jira-1.34.1.zip",
  "path": "/package/atlassian_jira/1.34.1",
  "icons": [
    {
      "src": "/img/jira-software-logo.svg",
      "path": "/package/atlassian_jira/1.34.1/img/jira-software-logo.svg",
      "title": "Jira Software Logo",
      "size": "590x625",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.19.16 || ~9.3.5 || ^9.4.1"
    }
  },
  "owner": {
    "type": "elastic",
    "github": "elastic/security-service-integrations"
  },
  "categories": [
    "security",
    "productivity_security"
  ],
  "signature_path": "/epr/atlassian_jira/atlassian_jira-1.34.1.zip.sig",
  "format_version": "3.3.2",
  "readme": "/package/atlassian_jira/1.34.1/docs/README.md",
  "license": "basic",
  "assets": [
    "/package/atlassian_jira/1.34.1/LICENSE.txt",
    "/package/atlassian_jira/1.34.1/changelog.yml",
    "/package/atlassian_jira/1.34.1/manifest.yml",
    "/package/atlassian_jira/1.34.1/validation.yml",
    "/package/atlassian_jira/1.34.1/docs/README.md",
    "/package/atlassian_jira/1.34.1/img/jira-software-logo.svg",
    "/package/atlassian_jira/1.34.1/kibana/tags.yml",
    "/package/atlassian_jira/1.34.1/data_stream/audit/manifest.yml",
    "/package/atlassian_jira/1.34.1/data_stream/audit/sample_event.json",
    "/package/atlassian_jira/1.34.1/data_stream/audit/fields/agent.yml",
    "/package/atlassian_jira/1.34.1/data_stream/audit/fields/base-fields.yml",
    "/package/atlassian_jira/1.34.1/data_stream/audit/fields/fields.yml",
    "/package/atlassian_jira/1.34.1/data_stream/audit/agent/stream/httpjson.yml.hbs",
    "/package/atlassian_jira/1.34.1/data_stream/audit/agent/stream/stream.yml.hbs",
    "/package/atlassian_jira/1.34.1/data_stream/audit/elasticsearch/ingest_pipeline/cloud.yml",
    "/package/atlassian_jira/1.34.1/data_stream/audit/elasticsearch/ingest_pipeline/default.yml",
    "/package/atlassian_jira/1.34.1/data_stream/audit/elasticsearch/ingest_pipeline/self-hosted.yml"
  ],
  "policy_templates": [
    {
      "name": "audit",
      "title": "Audit Logs",
      "description": "Collect audit logs from Atlassian Jira with Elastic Agent.",
      "inputs": [
        {
          "type": "logfile",
          "title": "Collect Jira audit logs via log files",
          "description": "Collecting audit logs from Jira via log files"
        },
        {
          "type": "httpjson",
          "title": "Collect Jira audit logs via API",
          "description": "Collecting audit logs from Jira via API"
        }
      ],
      "multiple": true,
      "deployment_modes": {
        "default": {
          "enabled": true
        },
        "agentless": {
          "enabled": true,
          "release": "ga"
        }
      }
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "atlassian_jira.audit",
      "title": "Jira Audit Logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/atlassian/application-data/jira/log/audit/*.log"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "jira-audit"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "condition",
              "type": "text",
              "title": "Condition",
              "description": "Condition to filter when to collect this input. See [Dynamic Input Configuration](https://www.elastic.co/guide/en/fleet/current/dynamic-input-configuration.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Jira audit logs",
          "description": "Collect Jira audit logs",
          "enabled": true,
          "ingestion_method": "File"
        },
        {
          "input": "httpjson",
          "vars": [
            {
              "name": "api_url",
              "type": "text",
              "title": "API URL",
              "description": "The API URL without the path.",
              "multi": false,
              "required": true,
              "show_user": true
            },
            {
              "name": "enable_request_tracer",
              "type": "bool",
              "title": "Enable request tracing",
              "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation] (https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_request_tracer_filename) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "username",
              "type": "text",
              "title": "Jira User Identifier",
              "description": "Your email address used as a Jira user identifier, to be used with a Jira API Token. Do not fill if you are using a personal access token.",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "password",
              "type": "password",
              "title": "Jira API Token",
              "description": "Jira API token used to authenticate with a Jira user identifier. Do not fill if you are using a personal access token.",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "token",
              "type": "password",
              "title": "Personal Access Token",
              "description": "The Personal Access Token used for self-hosted instances. If set, Jira User Identifier and Jira API Token will be ignored.",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "atlassian_cloud",
              "type": "bool",
              "title": "Atlassian Cloud",
              "description": "Is this an Atlassian SaaS Confluence instance",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "http_client_timeout",
              "type": "text",
              "title": "HTTP Client Timeout",
              "description": "Duration before declaring that the HTTP client connection has timed out. Valid time units are ns, us, ms, s, m, h.",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": "60s"
            },
            {
              "name": "limit",
              "type": "integer",
              "title": "Limit",
              "description": "Number of events to fetch on each request",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": 1000
            },
            {
              "name": "interval",
              "type": "text",
              "title": "Interval",
              "description": "Interval at which the logs will be pulled. The value must be between 2m and 1h. Supported units for this parameter are h/m/s.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "1h"
            },
            {
              "name": "initial_interval",
              "type": "text",
              "title": "Initial Interval",
              "description": "Initial interval for the first API call. Defaults to 24 hours. Supported units for this parameter are h/m/s.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "24h"
            },
            {
              "name": "ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "proxy_url",
              "type": "text",
              "title": "Proxy URL",
              "description": "URL to proxy connections in the form of http\\[s\\]://<user>:<password>@<server name/ip>:<port>",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "forwarded",
                "jira-audit"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. \nThis executes in the agent before the logs are parsed. \nSee [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "httpjson.yml.hbs",
          "title": "Jira audit logs via Jira audit API",
          "description": "Collect Jira audit logs via Jira audit API",
          "enabled": false,
          "ingestion_method": "API"
        }
      ],
      "package": "atlassian_jira",
      "path": "audit"
    }
  ]
}