I faced this issue and found the solution so posting the problem and solution here to help others that may be having the same problem.
Add-on for JIRA is installed and executes fine on-demand with config.ini when using things like:
| jira jqlquery "Project='test'"
However, trying to use the modular input it throws this error every execution:
2019-09-04 19:29:51,497 ERROR pid=6324 tid=MainThread file=base_modinput.py:log_error:69 | Get error when collecting events.
Traceback (most recent call last):
File "/opt/splunk/etc/apps/jira/bin/libs/modinput_wrapper/base_modinput.py", line 173, in stream_events
self.collect_events(inputs, ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 312, in collect_events
self.sync(ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 112, in sync
events = self.get_jira_events(data)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in get_jira_events
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/lib/python2.7/urllib.py", line 1285, in quote
raise TypeError('None object cannot be quoted')
TypeError: None object cannot be quoted
The list of wanted fields is configured properly in jira.conf and inputs.conf.
@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!
Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer
Have a proper JQL that is first validated via JIRA Search.
JQL used: project in (test)
Assigned proper sourcetype manually (jira
), as automatic sourcetype assignment was failing with code exception.
Verified ingested JIRA types under test project key.
index=test sourcetype=jira | stats count by fields.issuetype.name
Does anyone know how to import Jira data with accented marks to splunk with Jira Collector?
@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!
Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer
Have a proper JQL that is first validated via JIRA Search.
JQL used: project in (test)
Assigned proper sourcetype manually (jira
), as automatic sourcetype assignment was failing with code exception.
Verified ingested JIRA types under test project key.
index=test sourcetype=jira | stats count by fields.issuetype.name