i apologize if this has been answered elsewhere, and a link to the topic already answered would suffice. I searched for remediation hub solution tickets but all i saw were IVM topics or monitoring jira itself.
I am new to insightconnect and working on my first “real” workflow. There is a “baked in” workflow called Remediation Hub Create Jira Ticket. Which ironically is exactly what I want to do. i successfully set up the jira connection and then go edit mode in the plug in and the first step is to create a remediation hub trigger. So am i creating a trigger on a remediation hub event, i.e. new solution is created?
I did activate the plugin and went over to RH and selected a solution and hit Send to Workflow. it looked like it worked but nothing showed up in Jira, at least in 15 min.
The end goal is to have a workflow that creates a ticket when a new solution is found, updates existing jira tickets if it is already present, and closes a ticket if a solution no longer exists. it would run once a day. Would i create 3 work flows, one for each “process” or put in conditional logic into one big beautiful workflow? And for it to be run at a specific time, would i first need to have a trigger that run a report against RH, then the reports “passed” to the the next step which would be the conditional logic?
i don’t see reports in RH. i do have SurfaceCommand but it doesn’t have access to solutions or prooof the way RH does.
So if there is something like this out there? a link to whitepaper/topic would be great. I guarantee i am over thinking this, just not sure where. Any guidance for a nub would be much appreciated.
Remediation Hub is a new feature to the Rapid7 platform. Currently the remediation hub trigger can only be ran manually using the send to workflow action from within remediation hub.
If you want to automate based on solutions we have a workflow that does this today.
It is not leveraging remediation hub. It does give you an example of how to run workflows on a time based trigger.
To see what happened with the remediation hub workflow that you are trying out, you can log into InsightConnect and look at the job that ran to see if it created the Jira ticket, and if it did not you should see a step failure with a log that says what happened.
totally apologize for the delay in response. Got tied up yesterday, and not in the fun way.
my job looked like it was successful, but it just took a while to fail.
If i can use a IVM query, can i use a query from surface command? i hunted for an example for one of this, but workflow that uses a SC query, i could probably piece together from the one you just sent and that one.
I’m not entirely sure which permissions are needed in Jira, that really depends on what you want to accomplish. If the goal is simply to create tickets, then you only need to grant permission for ticket creation.
That workflow includes an example of how to use the query and interpret the output.
If you’d prefer not to run a query directly, you can alternatively call a saved query instead.
Regarding Remediation Hub, it looks like some variables were renamed. I’ve opened a ticket to get that corrected. You can still use the trigger and build workflows, but you’ll need to adjust the variable names slightly.
For example, the trigger is currently hardcoded to use remediationId as the variable, but the payload now sends it as remediation_id. Once I receive confirmation that this has been resolved, I’ll post an update here.