You configure Jira actions in the actions array. Action-specific attributes are specified using the jira keyword.

The following snippet shows a simple jira action definition:

"actions" : {
  "create-jira-issue" : {
    "transform" : { ... },
    "throttle_period" : "5m",
    "jira" : {
      "account" : "integration-account", 
      "fields" : {
          "project" : {
            "key": "PROJ" 
          },
          "issuetype" : {
            "name": "Bug" 
          },
          "summary" : "Encountered {{ctx.payload.hits.total.value}} errors in the last 5 minutes", 
          "description" : "Encountered {{ctx.payload.hits.total.value}} errors in the last 5 minutes (facepalm)", 
          "labels" : ["auto"], 
          "priority" : {
            "name" : "High" 
          }
      }
    }
  }
}

Depending of how Jira projects are configured, the issues can have many different fields and values. Therefore the jira action can accept any type of sub fields within its issue field. These fields will be directly used when calling Jira’s Create Issue API, allowing any type of custom fields to be used.

You configure the accounts Watcher can use to communicate with Jira in the xpack.notification.jira namespace in elasticsearch.yml.

Watcher supports Basic Authentication for Jira Software. To configure a Jira account you need to specify (see secure settings):

bin/elasticsearch-keystore add xpack.notification.jira.account.monitoring.secure_url
bin/elasticsearch-keystore add xpack.notification.jira.account.monitoring.secure_user
bin/elasticsearch-keystore add xpack.notification.jira.account.monitoring.secure_password

To avoid credentials that transit in clear text over the network, Watcher will reject url settings like http://internal-jira.elastic.co that are based on plain text HTTP protocol. This default behavior can be disabled with the explicit allow_http setting:

xpack.notification.jira:
  account:
    monitoring:
      allow_http: true

You can also specify defaults for the Jira issues:

xpack.notification.jira:
  account:
    monitoring:
      issue_defaults:
        project:
          key: proj
        issuetype:
          name: Bug
        summary: "X-Pack Issue"
        labels: ["auto"]

If you configure multiple Jira accounts, you either need to configure a default account or specify which account the notification should be sent with in the jira action.

xpack.notification.jira:
  default_account: team1
  account:
    team1:
      ...
    team2:
      ...

Using SSL/TLS with OpenJDKedit

As each distributor is free to choose how to package OpenJDK, it may happen, that even despite the exact same version, an OpenJDK distribution contains different parts under different Linux distributions.

This can lead to issues with any action or input that uses TLS, like the jira, pagerduty, slack, or webhook one, because of missing CA certs. If you encounter TLS errors, when writing watches that connect to TLS endpoints, you should try to upgrade to the latest available OpenJDK distribution for your platform and if that does not help, try to upgrade to Oracle JDK.