Enable saved searches for the Splunk Add-on for Jira Cloud

The Splunk Add-on for Jira Cloud includes several saved searches that generate lookups. If you are using this add-on with Splunk IT Service Intelligence, you need to enable these saved searches. These saved searches are based on the data collected through Jira Cloud Users moduler input. To collect the data, you need to Configure Jira Cloud Users input and Set Up the Splunk Add-on for Jira Cloud. After the data has been indexed by the Splunk platform, you can manually run the saved searches to populate the lookup. You can also schedule the searches to run at a frequency that matches how often configuration changes occur in your environment.

Saved search name	Description
Jira Cloud Users	Saved search which populates splunk_ta_jira_cloud_users_lookup KV store lookup.

You can review and enable these saved searches either in Splunk Web or in the configuration files.

Access and enable saved searches in Splunk Web

To access and enable the saved searches in Splunk Web:

1. Go to Settings > Searches, reports, and alerts.

2. Set the app context to Splunk Add-on for Jira Cloud.

3. Click Enable next to the searches you would like to enable.

Access and enable saved searches in savedsearches.conf

To access and enable the saved searches in the configuration files:

1. Go to $SPLUNK_HOME/etc/apps/Splunk_TA_Jira_Cloud/default/savedsearches.conf.

2. Copy the file to /local.

3. In the local copy, for each search that you want to enable, change Disabled = 1 to Disabled = 0.