All Apps and Add-ons

Add-on for JIRA - modular input configuration

ealmeida_splunk
Splunk Employee
Splunk Employee

I faced this issue and found the solution so posting the problem and solution here to help others that may be having the same problem.

Add-on for JIRA is installed and executes fine on-demand with config.ini when using things like:

| jira jqlquery "Project='test'"

However, trying to use the modular input it throws this error every execution:

2019-09-04 19:29:51,497 ERROR pid=6324 tid=MainThread file=base_modinput.py:log_error:69 | Get error when collecting events.
Traceback (most recent call last):
File "/opt/splunk/etc/apps/jira/bin/libs/modinput_wrapper/base_modinput.py", line 173, in stream_events
self.collect_events(inputs, ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 312, in collect_events
self.sync(ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 112, in sync
events = self.get_jira_events(data)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in get_jira_events
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/lib/python2.7/urllib.py", line 1285, in quote
raise TypeError('None object cannot be quoted')
TypeError: None object cannot be quoted

The list of wanted fields is configured properly in jira.conf and inputs.conf.

0 Karma
1 Solution

ealmeida_splunk
Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

View solution in original post

0 Karma

thomas_art
Path Finder

Does anyone know how to import Jira data with accented marks to splunk with Jira Collector?

0 Karma

ealmeida_splunk
Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...