topic Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK in All Apps and Add-ons

Splunk for Jenkins - NO DATA SENT TO SPLUNK

premraj_vs — Fri, 01 Mar 2019 18:30:03 GMT

Hi All,

I am trying to integrate Splunk with Jenkins and as per this link https://github.com/jenkinsci/splunk-devops-plugin

I create the latest build and uploaded it in Jenkins.

In /configure page, i provided my splunk server details and test connection verified.

But in https://wiki.jenkins.io/display/JENKINS/Splunk+Plugin+for+Jenkins , UI looks different and i am not seeing any data in Splunk from Jenkins.

Can anyone tell me what is missing.

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

premraj_vs — Mon, 04 Mar 2019 17:59:53 GMT

Can anyone share any insights on this ?

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

txiao_splunk — Mon, 25 Mar 2019 15:12:26 GMT

The plugin version is pretty old, could you please upgrade to latest version on the Jenkins update center?

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

premraj_vs — Mon, 25 Mar 2019 15:17:39 GMT

I tried with the latest version of jenkins jar and still no data pushed to Splunk

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

txiao_splunk — Mon, 25 Mar 2019 15:20:01 GMT

can you see any data in the Search app, pls search
index=jenkins*

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

premraj_vs — Mon, 25 Mar 2019 16:39:15 GMT

No i do not see any data. Can you share with me the meta data that you are using in Jenkins configuration page ?

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

txiao_splunk — Tue, 26 Mar 2019 02:41:24 GMT

I haven't heard any user complain about the default metadata config.
I am wondering the splunk config, e.g. if you used a heavy forwarder for "Http Input" , you can not search the data on heavy forwarder, you have to go to search head or indexer.
To verify it, pls run

hec_host=<splunk-host>
hec_port=8088
hec_token=<splunk-token>
curl -k "https://${hec_host}:${hec_port}/services/collector/event" -H "Authorization: Splunk ${hec_token}" -d \
'{"host":"test-host","index":"jenkins_console","sourcetype":"json:jenkins","source":"logger://dummy","event":{"level":"INFO","log_source":"cmdline","message":"Test HEC"}}'

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

dvargas_splunk — Fri, 24 May 2019 03:48:22 GMT

Premraj_vs were you able to get resolution to this issue?

I recently worked with a customer that experienced the same matter. It was determined that on the Jenkins Configuration under event source the variable "source =" was left empty and this seemed to have been the culprit to no data being presented into Splunk App for Jenkins.

Adding the wild card "*" seems to have worked in this situation. I hope that helps.

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

aakif — Wed, 30 Sep 2020 04:21:15 GMT

"jenkins_artifact"
"jenkins_console"
"jenkins_statistics"
"jenkins"

I am getting proper search results for all jenkins indexes but nothing is showing in Jenkins App , Can you please help ?

Re: Splunk for Jenkins - NO DATA SENT TO SPLUNK

yomesky2000 — Tue, 19 Dec 2023 18:23:04 GMT

I spent 3 days trying to fix this issue as Jenkins was not publishing its build analysis to Splunk. This solution worked for me and thanks to @dvargas_splunk. On Jenkins -> Manage Jenkins -> Scroll down to the Splunk connection entries -> Advanced -> Event Source: source="*"
I restarted Jenkins and Splunk service and I started seeing the Jenkins Build Analysis in Splunk