How to send Jira active users to Splunk ?

[Bhanu Prakash]

Disclaimer: Long and detailed Question. 

Scenario: 
We would like to send Jira Cloud Active users to Splunk. Note this is for Jira Cloud only

Restrictions we have: 

1. Cant use apps which cost additional cost to company. 
2. Cant user apps which does not have a bug bounty enabled on it. 
3. Cant provide access splunk folks as site admin to pull users via API. 

Question: 

How can i fetch Jira Cloud users and send the information to Splunk ? 

[Humashankar VJ]

Hi @Bhanu Prakash 

To export active Jira Cloud users to Splunk without incurring extra costs or granting site admin access, you can leverage the Jira REST API.

• Generate an API token for authentication, then use the /rest/api/3/users/search endpoint to fetch active user data.
• Format the data as JSON or CSV, suitable for Splunk. Finally, use a scheduled script to send the formatted data to Splunk via its HTTP Event Collector - HEC.

This method ensures you stay within your constraints while successfully transferring user data.

Hope this helps - Happy to help further!!
Thank you very much and have a great one!
Warm regards