topic Re: Azure DevOps Daily Commits Info in Splunk in Getting Data In

Azure DevOps Daily Commits Info in Splunk

ps23 — Mon, 22 Jan 2024 23:51:54 GMT

Has anyone tried this add-on to pull the tfs commits into Splunk via Azure DevOps (Git Activity) - Technical Add-On. I tried installing this app on one of the heavy forwarder but inputs section of this add-on does not work.

Re: Azure DevOps Daily Commits Info in Splunk

isoutamo — Thu, 25 Jan 2024 13:44:11 GMT

Have you configured the Add-On or just try to add new inputs? Usually you must 1st create connection to your Azure and correct organisation.

Azure organization is your own AzureDevOps organisation what ever it's, not tenant eg. in Entra ID. Then you must create your own security token under that DevOps organization/project, which has enough access to get that information.

Then it seems that those python scripts have not tested enough. As all python libraries are under separate lib directory (correctly) not in bin directory, they must be additional path in those scripts. Otherwise it cannot found needed libraries.

I fixed it on my test env like

import os APP_LIB_FOLDER = os.path.join(os.path.dirname(__file__), "..", "lib") sys.path.insert(0, APP_LIB_FOLDER)

Just add those before it try to import e.g. solnlib.

That fix needs to do all those files which are directly used from splunk side.

r. Ismo

Re: Azure DevOps Daily Commits Info in Splunk

ps23 — Fri, 01 Mar 2024 06:05:24 GMT

This helped, there were few more errors in the python which I fixed too. Thanks

Re: Azure DevOps Daily Commits Info in Splunk

ps23 — Tue, 05 Mar 2024 06:12:32 GMT

The data gets ingested one time only when the inputs are first configured. The interval for the inputs have been set as 3600 still no events are written. Internal logs shows that inputs are running but no new events are logged.