Hi,
I'm attempting to use a standard JQL_Query to filter my JIRA issues down by project and summary before performing any sort of action on them in Splunk, but Splunk only seems to recognize the initial field I enter.
For example, in the following query I get results filtered by Summary but not Project:
|jirarest jqlsearch Summary~"Exercise" AND Project=Support
Do I have the syntax wrong? How can I properly constrain my search from within Splunk?
Great question! The issue is how you are querying. To the JIRA command
|jirarest jqlsearch Summary~"Exercise" AND Project=Support
Is interpreted as Summary~"Exercise" being the totality of arguments passed. In order for the query to work, I would suggest using single quotes for criteria within double quotes for the whole argument. Something like this.
|jirarest jqlsearch "Summary~'Exercise' AND Project='Support' "
Great question! The issue is how you are querying. To the JIRA command
|jirarest jqlsearch Summary~"Exercise" AND Project=Support
Is interpreted as Summary~"Exercise" being the totality of arguments passed. In order for the query to work, I would suggest using single quotes for criteria within double quotes for the whole argument. Something like this.
|jirarest jqlsearch "Summary~'Exercise' AND Project='Support' "
Worked perfectly. Thanks!