All Apps and Add-ons

Add-on for JIRA - modular input configuration

Splunk Employee
Splunk Employee

I faced this issue and found the solution so posting the problem and solution here to help others that may be having the same problem.

Add-on for JIRA is installed and executes fine on-demand with config.ini when using things like:

| jira jqlquery "Project='test'"

However, trying to use the modular input it throws this error every execution:

2019-09-04 19:29:51,497 ERROR pid=6324 tid=MainThread file=base_modinput.py:log_error:69 | Get error when collecting events.
Traceback (most recent call last):
File "/opt/splunk/etc/apps/jira/bin/libs/modinput_wrapper/base_modinput.py", line 173, in stream_events
self.collect_events(inputs, ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 312, in collect_events
self.sync(ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 112, in sync
events = self.get_jira_events(data)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in get_jira_events
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/lib/python2.7/urllib.py", line 1285, in quote
raise TypeError('None object cannot be quoted')
TypeError: None object cannot be quoted

The list of wanted fields is configured properly in jira.conf and inputs.conf.

0 Karma
1 Solution

Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

View solution in original post

0 Karma

Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

View solution in original post

0 Karma