JiraEventCollector

Details

Rules (XIF)

[MODEL: dataset=atlassian_jira_raw, model=Audit]
alter XDM.Audit.operation = summary,
      XDM.Audit.TriggeredBy.ipv4 = remoteAddress,
      XDM.Audit.TriggeredBy.identity.name = authorKey,
      XDM.Audit.TriggeredBy.identity.uuid = authorAccountId,
      XDM.Audit.event_timestamp = parse_timestamp("%Y-%m-%dT%H:%M:%E3S", arrayindex(split(created, "+"), 0)),
      XDM.Audit.operation_type = category,
      XDM.Audit.identity.uuid = json_extract_scalar(objectItem, "$.id"),
      XDM.Audit.identity.name = json_extract_scalar(objectItem, "$.name"),
      XDM.Audit.identity.type = json_extract_scalar(objectItem, "$.typeName"),
      XDM.Audit.outcome = json_extract_scalar(changedValues, "$.changedTo");

Schema

atlassian_jira_raw

{
  "atlassian_jira_raw": {
    "summary": {
      "type": "string",
      "is_array": false
    },
    "remoteAddress": {
      "type": "string",
      "is_array": false
    },
    "authorKey": {
      "type": "string",
      "is_array": false
    },
    "authorAccountId": {
      "type": "string",
      "is_array": false
    },
    "created": {
      "type": "datetime",
      "is_array": false
    },
    "category": {
      "type": "string",
      "is_array": false
    },
    "objectItem": {
      "type": "string",
      "is_array": false
    },
    "changedValues": {
      "type": "string",
      "is_array": false
    }
  }
}