# jira

> For the complete documentation index, see [llms.txt](https://docs.redpanda.com/llms.txt). Component-specific: [connect-full.txt](https://docs.redpanda.com/connect-full.txt)

---
title: jira
latest-connect-version: 4.104.0
latest-operator-version: v26.2.1
latest-console-tag: v3.10.0
latest-redpanda-tag: v26.2.1
docname: inputs/jira
page-component-name: connect
page-version: master
page-component-version: master
page-component-title: Connect
page-relative-src-path: inputs/jira.adoc
page-edit-url: https://github.com/redpanda-data/rp-connect-docs/edit/main/modules/components/pages/inputs/jira.adoc
description: Streams Jira issues, comments, or changelog entries via JQL with incremental polling.
page-git-created-date: "2026-07-20"
page-git-modified-date: "2026-07-20"
---

<!-- Source: https://docs.redpanda.com/connect/components/inputs/jira.md -->

Streams Jira issues, comments, or changelog entries via JQL with incremental polling.

Introduced in version 4.100.0.

Periodically queries Jira’s REST API using a JQL filter and emits one message per resource. The cursor (max issue `updated` timestamp, plus the set of issue versions already emitted at the boundary) is persisted via the configured cache resource after every fully-acknowledged page, so progress survives restarts — including mid-backfill — and boundary issues are not re-emitted on every poll.

Authentication uses API token (email + token) basic auth. The `backoff` settings govern the adaptive backoff applied to 429 responses; retries of 502/503/504 responses use a fixed three-attempt policy.

Each message body is the raw JSON of the resource. Metadata fields:

-   `jira_id` - issue key (issues) / comment ID / changelog history ID

-   `jira_issue_key` - parent issue key (omitted for resource=issues)

-   `jira_project` - project key

-   `jira_updated` - RFC 3339 timestamp of the resource

-   `jira_event_type` - "issue" / "comment" / "changelog"

-   `jira_self` - Jira API URL of the resource


Limitations (v1): OAuth and the worklogs resource are not yet supported. For resource=comments and resource=changelog, only the first page of child resources (up to ~50 comments or ~100 changelog entries per issue update) is emitted; a WARN is logged when truncation is detected. To fetch the full child set for issues that exceed this limit, query the Jira REST API directly.

#### Common

```yml
inputs:
  label: ""
  jira:
    auth:
      email: "" # No default (required)
      api_token: "" # No default (required)
    resource: issues
    jql: ""
    fields:
      - "*all"
    expand: []
    page_size: 50
    poll_interval: 60s
    cursor:
      cache: "" # No default (required)
      key: ""
      overlap: 60s
    auto_replay_nacks: true
    base_url: "" # No default (required)
    timeout: 5s
```

#### Advanced

```yml
inputs:
  label: ""
  jira:
    auth:
      email: "" # No default (required)
      api_token: "" # No default (required)
    resource: issues
    jql: ""
    fields:
      - "*all"
    expand: []
    page_size: 50
    poll_interval: 60s
    cursor:
      cache: "" # No default (required)
      key: ""
      overlap: 60s
    auto_replay_nacks: true
    base_url: "" # No default (required)
    timeout: 5s
    tls:
      enabled: false
      skip_cert_verify: false
      enable_renegotiation: false
      root_cas: ""
      root_cas_file: ""
      client_certs: []
    proxy_url: ""
    disable_http2: false
    tps_limit: 0
    tps_burst: 1
    backoff:
      initial_interval: 1s
      max_interval: 30s
      max_retries: 3
    tcp:
      connect_timeout: 0s
      keep_alive:
        idle: 15s
        interval: 15s
        count: 9
      tcp_user_timeout: 0s
    http:
      max_idle_conns: 100
      max_idle_conns_per_host: 0
      max_conns_per_host: 64
      idle_conn_timeout: 1m30s
      tls_handshake_timeout: 10s
      expect_continue_timeout: 1s
      response_header_timeout: 0s
      disable_keep_alives: false
      disable_compression: false
      max_response_header_bytes: 1048576
      max_response_body_bytes: 10485760
      write_buffer_size: 4096
      read_buffer_size: 4096
      h2:
        strict_max_concurrent_requests: false
        max_decoder_header_table_size: 4096
        max_encoder_header_table_size: 4096
        max_read_frame_size: 16384
        max_receive_buffer_per_connection: 1048576
        max_receive_buffer_per_stream: 1048576
        send_ping_timeout: 0s
        ping_timeout: 15s
        write_byte_timeout: 0s
    access_log_level: ""
    access_log_body_limit: 0
```

## [](#fields)Fields

### [](#access_log_body_limit)`access_log_body_limit`

Maximum bytes of request/response body to include in logs. 0 to skip body logging.

**Type**: `int`

**Default**: `0`

### [](#access_log_level)`access_log_level`

Log level for HTTP request/response logging. Empty disables logging.

**Type**: `string`

**Default**: `""`

**Options**: `` `, `TRACE ``, `DEBUG`, `INFO`, `WARN`, `ERROR`

### [](#auth)`auth`

API token authentication.

**Type**: `object`

### [](#auth-api_token)`auth.api_token`

Jira API token.

> ⚠️ **CAUTION**
>
> This field contains sensitive information that usually shouldn’t be added to a configuration directly. For more information, see [Secrets](https://docs.redpanda.com/connect/configuration/secrets/).

**Type**: `string`

### [](#auth-email)`auth.email`

Email or username of the Jira account.

**Type**: `string`

### [](#auto_replay_nacks)`auto_replay_nacks`

Whether messages that are rejected (nacked) at the output level should be automatically replayed indefinitely, eventually resulting in back pressure if the cause of the rejections is persistent. If set to `false` these messages will instead be deleted. Disabling auto replays can greatly improve memory efficiency of high throughput streams as the original shape of the data can be discarded immediately upon consumption and mutation.

**Type**: `bool`

**Default**: `true`

### [](#backoff)`backoff`

Adaptive backoff configuration for 429 (Too Many Requests) responses. Always active.

**Type**: `object`

### [](#backoff-initial_interval)`backoff.initial_interval`

Initial interval between retries on 429 responses.

**Type**: `string`

**Default**: `1s`

### [](#backoff-max_interval)`backoff.max_interval`

Maximum interval between retries on 429 responses.

**Type**: `string`

**Default**: `30s`

### [](#backoff-max_retries)`backoff.max_retries`

Maximum number of retries on 429 responses.

**Type**: `int`

**Default**: `3`

### [](#base_url)`base_url`

Base URL of the target service (e.g., [https://api.example.com](https://api.example.com)). TLS is enabled automatically for https URLs.

**Type**: `string`

### [](#cursor)`cursor`

Cursor checkpoint storage.

**Type**: `object`

### [](#cursor-cache)`cursor.cache`

Name of a cache resource used to persist the cursor.

**Type**: `string`

### [](#cursor-key)`cursor.key`

Cache key. Defaults to `redpanda_connect_jira_input_<resource>`.

**Type**: `string`

**Default**: `""`

### [](#cursor-overlap)`cursor.overlap`

Widens `updated >= cursor - overlap` to absorb minute-boundary effects. Jira JQL’s `updated` operator has minute precision, so this should be set to at least 1m to have an effect.

**Type**: `string`

**Default**: `60s`

### [](#disable_http2)`disable_http2`

Disable HTTP/2 and force HTTP/1.1.

**Type**: `bool`

**Default**: `false`

### [](#expand)`expand[]`

Jira `expand` query parameter. The input automatically adds `changelog` when resource=changelog.

**Type**: `array<string>`

**Default**: `[]`

### [](#fields-2)`fields[]`

Jira `fields` query parameter - narrow this for throughput.

**Type**: `array<string>`

**Default**:

```yaml
- "*all"
```

### [](#http)`http`

HTTP transport settings controlling connection pooling, timeouts, and HTTP/2.

**Type**: `object`

### [](#http-disable_compression)`http.disable_compression`

Disable automatic decompression of gzip responses.

**Type**: `bool`

**Default**: `false`

### [](#http-disable_keep_alives)`http.disable_keep_alives`

Disable HTTP keep-alive connections; each request uses a new connection.

**Type**: `bool`

**Default**: `false`

### [](#http-expect_continue_timeout)`http.expect_continue_timeout`

Maximum time to wait for a server’s 100-continue response before sending the body. 0 means the body is sent immediately.

**Type**: `string`

**Default**: `1s`

### [](#http-h2)`http.h2`

HTTP/2-specific transport settings. Only applied when HTTP/2 is enabled.

**Type**: `object`

### [](#http-h2-max_decoder_header_table_size)`http.h2.max_decoder_header_table_size`

Upper limit in bytes for the HPACK header table used to decode headers from the peer. Must be less than 4 MiB.

**Type**: `int`

**Default**: `4096`

### [](#http-h2-max_encoder_header_table_size)`http.h2.max_encoder_header_table_size`

Upper limit in bytes for the HPACK header table used to encode headers sent to the peer. Must be less than 4 MiB.

**Type**: `int`

**Default**: `4096`

### [](#http-h2-max_read_frame_size)`http.h2.max_read_frame_size`

Largest HTTP/2 frame this endpoint will read. Valid range: 16 KiB to 16 MiB.

**Type**: `int`

**Default**: `16384`

### [](#http-h2-max_receive_buffer_per_connection)`http.h2.max_receive_buffer_per_connection`

Maximum flow-control window size in bytes for data received on a connection. Must be at least 64 KiB and less than 4 MiB.

**Type**: `int`

**Default**: `1048576`

### [](#http-h2-max_receive_buffer_per_stream)`http.h2.max_receive_buffer_per_stream`

Maximum flow-control window size in bytes for data received on a single stream. Must be less than 4 MiB.

**Type**: `int`

**Default**: `1048576`

### [](#http-h2-ping_timeout)`http.h2.ping_timeout`

Timeout waiting for a PING response before closing the connection.

**Type**: `string`

**Default**: `15s`

### [](#http-h2-send_ping_timeout)`http.h2.send_ping_timeout`

Idle timeout after which a PING frame is sent to verify connection health. 0 disables health checks.

**Type**: `string`

**Default**: `0s`

### [](#http-h2-strict_max_concurrent_requests)`http.h2.strict_max_concurrent_requests`

When true, new requests block when a connection’s concurrency limit is reached instead of opening a new connection.

**Type**: `bool`

**Default**: `false`

### [](#http-h2-write_byte_timeout)`http.h2.write_byte_timeout`

Timeout for writing data to a connection. The timer resets whenever bytes are written. 0 disables the timeout.

**Type**: `string`

**Default**: `0s`

### [](#http-idle_conn_timeout)`http.idle_conn_timeout`

How long an idle connection remains in the pool before being closed. 0 disables the timeout.

**Type**: `string`

**Default**: `1m30s`

### [](#http-max_conns_per_host)`http.max_conns_per_host`

Maximum total connections (active + idle) per host. 0 means unlimited.

**Type**: `int`

**Default**: `64`

### [](#http-max_idle_conns)`http.max_idle_conns`

Maximum total number of idle (keep-alive) connections across all hosts. 0 means unlimited.

**Type**: `int`

**Default**: `100`

### [](#http-max_idle_conns_per_host)`http.max_idle_conns_per_host`

Maximum idle connections to keep per host. 0 (the default) uses GOMAXPROCS+1.

**Type**: `int`

**Default**: `0`

### [](#http-max_response_body_bytes)`http.max_response_body_bytes`

Maximum bytes of response body the client will read. The response body is wrapped with a limit reader; reads beyond this cap return EOF. 0 disables the limit.

**Type**: `int`

**Default**: `10485760`

### [](#http-max_response_header_bytes)`http.max_response_header_bytes`

Maximum bytes of response headers to allow.

**Type**: `int`

**Default**: `1048576`

### [](#http-read_buffer_size)`http.read_buffer_size`

Size in bytes of the per-connection read buffer.

**Type**: `int`

**Default**: `4096`

### [](#http-response_header_timeout)`http.response_header_timeout`

Maximum time to wait for response headers after writing the full request. 0 disables the timeout.

**Type**: `string`

**Default**: `0s`

### [](#http-tls_handshake_timeout)`http.tls_handshake_timeout`

Maximum time to wait for a TLS handshake to complete. 0 disables the timeout.

**Type**: `string`

**Default**: `10s`

### [](#http-write_buffer_size)`http.write_buffer_size`

Size in bytes of the per-connection write buffer.

**Type**: `int`

**Default**: `4096`

### [](#jql)`jql`

Jira JQL filter. The input appends an `updated >= cursor` predicate and `ORDER BY updated ASC, key ASC`. Empty means all issues visible to the principal.

**Type**: `string`

**Default**: `""`

### [](#page_size)`page_size`

Issues per Jira page (Jira max 100).

**Type**: `int`

**Default**: `50`

### [](#poll_interval)`poll_interval`

Time to wait between polls once the input has caught up. Minimum 10s.

**Type**: `string`

**Default**: `60s`

### [](#proxy_url)`proxy_url`

HTTP proxy URL. Empty string disables proxying.

**Type**: `string`

**Default**: `""`

### [](#resource)`resource`

Which Jira resource to emit.

**Type**: `string`

**Default**: `issues`

**Options**: `issues`, `comments`, `changelog`

### [](#tcp)`tcp`

TCP socket configuration.

**Type**: `object`

### [](#tcp-connect_timeout)`tcp.connect_timeout`

Maximum amount of time a dial will wait for a connect to complete. Zero disables.

**Type**: `string`

**Default**: `0s`

### [](#tcp-keep_alive)`tcp.keep_alive`

TCP keep-alive probe configuration.

**Type**: `object`

### [](#tcp-keep_alive-count)`tcp.keep_alive.count`

Maximum unanswered keep-alive probes before dropping the connection. Zero defaults to 9.

**Type**: `int`

**Default**: `9`

### [](#tcp-keep_alive-idle)`tcp.keep_alive.idle`

Duration the connection must be idle before sending the first keep-alive probe. Zero defaults to 15s. Negative values disable keep-alive probes.

**Type**: `string`

**Default**: `15s`

### [](#tcp-keep_alive-interval)`tcp.keep_alive.interval`

Duration between keep-alive probes. Zero defaults to 15s.

**Type**: `string`

**Default**: `15s`

### [](#tcp-tcp_user_timeout)`tcp.tcp_user_timeout`

Maximum time to wait for acknowledgment of transmitted data before killing the connection. Linux-only (kernel 2.6.37+), ignored on other platforms. When enabled, keep\_alive.idle must be greater than this value per RFC 5482. Zero disables.

**Type**: `string`

**Default**: `0s`

### [](#timeout)`timeout`

HTTP request timeout.

**Type**: `string`

**Default**: `5s`

### [](#tls)`tls`

Custom TLS settings can be used to override system defaults.

**Type**: `object`

### [](#tls-client_certs)`tls.client_certs[]`

A list of client certificates to use. For each certificate either the fields `cert` and `key`, or `cert_file` and `key_file` should be specified, but not both.

**Type**: `array<object>`

**Default**: `[]`

```yaml
# Examples:
client_certs:
  - cert: foo
    key: bar

# ---

client_certs:
  - cert_file: ./example.pem
    key_file: ./example.key
```

### [](#tls-client_certs-cert)`tls.client_certs[].cert`

A plain text certificate to use.

**Type**: `string`

**Default**: `""`

### [](#tls-client_certs-cert_file)`tls.client_certs[].cert_file`

The path of a certificate to use.

**Type**: `string`

**Default**: `""`

### [](#tls-client_certs-key)`tls.client_certs[].key`

A plain text certificate key to use.

> ⚠️ **CAUTION**
>
> This field contains sensitive information that usually shouldn’t be added to a configuration directly. For more information, see [Secrets](https://docs.redpanda.com/connect/configuration/secrets/).

**Type**: `string`

**Default**: `""`

### [](#tls-client_certs-key_file)`tls.client_certs[].key_file`

The path of a certificate key to use.

**Type**: `string`

**Default**: `""`

### [](#tls-client_certs-password)`tls.client_certs[].password`

A plain text password for when the private key is password encrypted in PKCS#1 or PKCS#8 format. The obsolete `pbeWithMD5AndDES-CBC` algorithm is not supported for the PKCS#8 format.

Because the obsolete pbeWithMD5AndDES-CBC algorithm does not authenticate the ciphertext, it is vulnerable to padding oracle attacks that can let an attacker recover the plaintext.

> ⚠️ **CAUTION**
>
> This field contains sensitive information that usually shouldn’t be added to a configuration directly. For more information, see [Secrets](https://docs.redpanda.com/connect/configuration/secrets/).

**Type**: `string`

**Default**: `""`

```yaml
# Examples:
password: foo

# ---

password: ${KEY_PASSWORD}
```

### [](#tls-enable_renegotiation)`tls.enable_renegotiation`

Whether to allow the remote server to repeatedly request renegotiation. Enable this option if you’re seeing the error message `local error: tls: no renegotiation`.

Requires version 3.45.0 or later.

**Type**: `bool`

**Default**: `false`

### [](#tls-enabled)`tls.enabled`

Whether custom TLS settings are enabled.

**Type**: `bool`

**Default**: `false`

### [](#tls-root_cas)`tls.root_cas`

An optional root certificate authority to use. This is a string, representing a certificate chain from the parent trusted root certificate, to possible intermediate signing certificates, to the host certificate.

> ⚠️ **CAUTION**
>
> This field contains sensitive information that usually shouldn’t be added to a configuration directly. For more information, see [Secrets](https://docs.redpanda.com/connect/configuration/secrets/).

**Type**: `string`

**Default**: `""`

```yaml
# Examples:
root_cas: |-
  -----BEGIN CERTIFICATE-----
  ...
  -----END CERTIFICATE-----
```

### [](#tls-root_cas_file)`tls.root_cas_file`

An optional path of a root certificate authority file to use. This is a file, often with a .pem extension, containing a certificate chain from the parent trusted root certificate, to possible intermediate signing certificates, to the host certificate.

**Type**: `string`

**Default**: `""`

```yaml
# Examples:
root_cas_file: ./root_cas.pem
```

### [](#tls-skip_cert_verify)`tls.skip_cert_verify`

Whether to skip server side certificate verification.

**Type**: `bool`

**Default**: `false`

### [](#tps_burst)`tps_burst`

Maximum burst size for rate limiting.

**Type**: `int`

**Default**: `1`

### [](#tps_limit)`tps_limit`

Rate limit in requests per second. 0 disables rate limiting.

**Type**: `float`

**Default**: `0`