category: Analytics & SIEM
provider: Atlassian
sectionorder:
- Connect
- Collect
commonfields:
  id: Jira Event Collector
  version: -1
configuration:
- defaultvalue: https://api.atlassian.com/ex/jira
  display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
  additionalinfo: For Jira Cloud with OAuth 2.0, use the default URL. For on-prem instances, use your Jira server URL.
- display: Authentication Method
  name: auth_method
  type: 15
  required: false
  section: Connect
  defaultvalue: Basic
  options:
  - Basic
  - OAuth 2.0
  additionalinfo: Select the authentication method to use. Basic authentication requires username and API token. OAuth 2.0 requires Client ID and Client Secret.
- display: User name
  additionalinfo: The user name (admin@example.com) for Basic Authentication
  name: credentials
  displaypassword: API token
  required: false
  type: 9
  section: Connect
- display: Cloud ID
  name: cloud_id
  required: false
  type: 0
  section: Connect
  additionalinfo: Required for Jira Cloud instances using OAuth 2.0. You can find your Cloud ID by navigating to https://admin.atlassian.com and selecting your site.
- display: Callback URL
  name: callback_url
  required: false
  type: 0
  section: Connect
  additionalinfo: The redirect URL to use for OAuth 2.0 (e.g., https://localhost/myapp)
- display: Client ID
  name: client_credentials
  required: false
  type: 9
  displaypassword: Client Secret
  section: Connect
  additionalinfo: 'OAuth 2.0 credentials. Required scopes - Classic RECOMMENDED: manage:jira-configuration. Granular: read:audit-log:jira, read:user:jira'
- defaultvalue: 3 days
  display: First fetch time (<number> <time unit>, e.g., 12 hours, 1 day, 3 months). default is 3 days.
  name: first_fetch
  required: true
  type: 0
  section: Collect
- defaultvalue: 1000
  display: The maximum number of events per fetch. Default is 1000.
  name: max_fetch
  required: true
  type: 0
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
description: 'Jira logs event collector integration for Cortex XSIAM.'
display: Jira Event Collector
name: Jira Event Collector
script:
  script: ''
  type: python
  subtype: python3
  dockerimage: demisto/py3-tools:1.0.0.10120494
  isfetchevents: true
  runonce: false
  feed: false
  longRunning: false
  commands:
  - description: 'Returns a list of audit records'
    name: jira-get-events
    arguments:
    - description: The maximum number of incidents per fetch. Default is 1000.
      isArray: true
      name: max_fetch
    - description: First fetch time (<number> <time unit>, e.g., 12 hours, 1 day, 3 months). Default is 3 days.
      isArray: true
      name: first_fetch
  - description: 'Start the OAuth 2.0 authorization process. Returns an authorization URL.'
    name: jira-oauth-start
  - description: 'Complete the OAuth 2.0 authorization process using the authorization code.'
    name: jira-oauth-complete
    arguments:
    - description: The authorization code received from the OAuth callback.
      name: code
      required: true
  - description: 'Test the OAuth 2.0 authentication'
    name: jira-oauth-test
marketplaces:
- marketplacev2
- platform
supportedModules:
- xsiam
fromversion: 6.5.0
triggers:
- conditions:
  - name: auth_method
    operator: equal
    value: Basic
  effects:
  - name: credentials
    action:
      required: true
  - name: client_credentials
    action:
      hidden: true
  - name: callback_url
    action:
      hidden: true
  - name: cloud_id
    action:
      hidden: true
- conditions:
  - name: auth_method
    operator: equal
    value: OAuth 2.0
  effects:
  - name: credentials
    action:
      hidden: true
  - name: client_credentials
    action:
      required: true
  - name: callback_url
    action:
      required: true
  - name: cloud_id  
    action:  
      required: true 
tests:
- No tests (auto formatted)