AlienVault® USM Anywhere™

Managing Your Jira Issues

Role Availability Read-Only Analyst Manager

After the AlienApp for Jira is configured and users execute the supported actions directly or through an orchestration rule, you can easily view a list of the Jira issues created by USM Anywhere and look at the eventsAny traffic or data exchange detected by AT&T Cybersecurity products through a sensor, or through external devices such as a firewall., alarmsAny traffic or data exchange detected by AT&T Cybersecurity products through a sensor, or through external devices such as a firewall., and vulnerabilitiesA known issue or weakness in a system, procedure, internal control, software package, or hardware that could be used to compromise security. related to the executed actions.

Viewing Jira Issues Created by USM Anywhere

The Issues list includes all issues created by an action applied directly to an alarm, event, or vulnerability, as well as any from actions that were triggered by an orchestration rule. From this list, you can open the issue in your Jira Cloud instance to view additional information about the issue or make updates to the issue, such as assigning the item to a team member or changing the priority.

To access the Jira issues

  1. In USM Anywhere, go to Data Sources > Integrations.
  2. Click the AlienApps tab.

    Access the AlienApps page

  3. On the AlienApps page, click the Jira tile.

    Click the Jira tile

  4. Click the Issues tab.

    View the Jira issues associated with USM Anywhere

    The displayed list includes all Jira issues generated by USM Anywhere, with the most recently opened issues at the top. Here you can view the current status and assignment for the issue as reported by your Jira Cloud instance.

  5. Click View to open the incident in the Jira UI.

    Click View to launch the Jira UI and open the issue

    In Jira, you can assign the issue, change its status, or perform any of the functions supported in the Jira project.

Filtering the Labeled Alarms and Vulnerabilities

USM Anywhere uses labels as a mechanism to classify alarms and vulnerabilities. These labels make it easy to filter items by label so that you can locate them easily and track their status. When the AlienApp for Jira executes a response action for an alarm or vulnerability, it automatically applies the Jira label to it. You can use this label as a filter so that a page displays data for only those items related to an AlienApp for Jira response action.

To view Jira action alarms or vulnerabilities

  1. Open the Alarms page or Vulnerabilities page.
  2. If the Search & Filters panel is not displayed, click the icon to expand it.

    USM Anywhere includes several filters displayed by default.

  3. Locate the Labels filter and select Jira.

    Use the Labels filter to view items with the Jira label

    If the Labels filter is not displayed, click Configure Filters at the bottom of the Search & Filters panel to configure filters for the page. (See Managing Filters for more information about configuring filters for the page display.)

    In the displayed list, you can scroll the list to the right and view the Labels column.

    Scroll the list to the right to view the Labels column