All Apps and Add-ons

Add-on for JIRA - modular input configuration

ealmeida_splunk
Splunk Employee
Splunk Employee

I faced this issue and found the solution so posting the problem and solution here to help others that may be having the same problem.

Add-on for JIRA is installed and executes fine on-demand with config.ini when using things like:

| jira jqlquery "Project='test'"

However, trying to use the modular input it throws this error every execution:

2019-09-04 19:29:51,497 ERROR pid=6324 tid=MainThread file=base_modinput.py:log_error:69 | Get error when collecting events.
Traceback (most recent call last):
File "/opt/splunk/etc/apps/jira/bin/libs/modinput_wrapper/base_modinput.py", line 173, in stream_events
self.collect_events(inputs, ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 312, in collect_events
self.sync(ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 112, in sync
events = self.get_jira_events(data)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in get_jira_events
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/lib/python2.7/urllib.py", line 1285, in quote
raise TypeError('None object cannot be quoted')
TypeError: None object cannot be quoted

The list of wanted fields is configured properly in jira.conf and inputs.conf.

0 Karma
1 Solution

ealmeida_splunk
Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

View solution in original post

0 Karma

thomas_art
Path Finder

Does anyone know how to import Jira data with accented marks to splunk with Jira Collector?

0 Karma

ealmeida_splunk
Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...