All Apps and Add-ons

Add-on for JIRA: How to add multiple fields to initial JQL_Query?

mrfredman
Path Finder

Hi,

I'm attempting to use a standard JQL_Query to filter my JIRA issues down by project and summary before performing any sort of action on them in Splunk, but Splunk only seems to recognize the initial field I enter.

For example, in the following query I get results filtered by Summary but not Project:
|jirarest jqlsearch Summary~"Exercise" AND Project=Support

Do I have the syntax wrong? How can I properly constrain my search from within Splunk?

1 Solution

Flynt
Splunk Employee
Splunk Employee

Great question! The issue is how you are querying. To the JIRA command

|jirarest jqlsearch Summary~"Exercise" AND Project=Support

Is interpreted as Summary~"Exercise" being the totality of arguments passed. In order for the query to work, I would suggest using single quotes for criteria within double quotes for the whole argument. Something like this.

|jirarest jqlsearch "Summary~'Exercise' AND Project='Support' "

View solution in original post

Flynt
Splunk Employee
Splunk Employee

Great question! The issue is how you are querying. To the JIRA command

|jirarest jqlsearch Summary~"Exercise" AND Project=Support

Is interpreted as Summary~"Exercise" being the totality of arguments passed. In order for the query to work, I would suggest using single quotes for criteria within double quotes for the whole argument. Something like this.

|jirarest jqlsearch "Summary~'Exercise' AND Project='Support' "

mrfredman
Path Finder

Worked perfectly. Thanks!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

    Are you ready to transform how your team handles complex data requests? We invite you to our upcoming ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...