All Apps and Add-ons

Add-on for JIRA - modular input configuration

ealmeida_splunk
Splunk Employee
Splunk Employee

I faced this issue and found the solution so posting the problem and solution here to help others that may be having the same problem.

Add-on for JIRA is installed and executes fine on-demand with config.ini when using things like:

| jira jqlquery "Project='test'"

However, trying to use the modular input it throws this error every execution:

2019-09-04 19:29:51,497 ERROR pid=6324 tid=MainThread file=base_modinput.py:log_error:69 | Get error when collecting events.
Traceback (most recent call last):
File "/opt/splunk/etc/apps/jira/bin/libs/modinput_wrapper/base_modinput.py", line 173, in stream_events
self.collect_events(inputs, ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 312, in collect_events
self.sync(ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 112, in sync
events = self.get_jira_events(data)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in get_jira_events
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/lib/python2.7/urllib.py", line 1285, in quote
raise TypeError('None object cannot be quoted')
TypeError: None object cannot be quoted

The list of wanted fields is configured properly in jira.conf and inputs.conf.

0 Karma
1 Solution

ealmeida_splunk
Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

View solution in original post

0 Karma

thomas_art
Path Finder

Does anyone know how to import Jira data with accented marks to splunk with Jira Collector?

0 Karma

ealmeida_splunk
Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...