JIRA App for Splunk - Error: command="jira", Invalid expression

[sureshprem]

We are trying to use the JIRA app fro Splunk after we saw the tool utilization at Splunk Conference Conf13. We have installed the Apps as per documentation, and we get an error message when we search in Splunk.

Apps: http://apps.splunk.com/app/1438/
Error Message: command="jira", Invalid expression
search: | jira "project = COR"

jira.conf:
[jira]
default_project = COR
tempMax = 1000

Built-in fields to display. Updated is required if you want a _time field.

keys = link,project,key,summary,type,priority,status,resolution,assignee,reporter,created,updated,resolved,fixVersion,components

Fields containing times to display.

time_keys =

Custom fields to display.

config.ini:
[jira]
hostname = xxxxx-test.tool.x.xxxx.com (part of FQDN masked)
username = splunk
password = xxxxxxx (password masked)

[ruman]

There were some new config.ini fields added in issue #13. Please try adding these defaults to your config.ini:

jira_protocol = https
jira_port = 443
soap_protocol = https
soap_port = 8080

[ruman]

Wonderful! I'm so happy it's working. Please let me know if you run into any other issues, or have any ideas for new features.

[sureshprem]

Many Thanks for your help.

[sureshprem]

I had moved the old jira directory as jira.OLD (sysadmin paranoid factor) and this may be have been causing the issues, and after I removed that directory, now I am able to run basic JQL queries on JIRA server

[ruman]

Did you restart splunk after editing config.ini. I was able to reproduce, and also confirm that a restart is required.

[sureshprem]

Hi,

Even after adding the new variables in config.ini I get the same error:

Error: command="jira", No option 'jira_protocol' in section: 'jira'

config.ini:
[jira]
hostname = intake-test.tool.s.nokia.com
username = splunk
password = xxxxxxxxx
jira_protocol = https
jira_port = 443
soap_protocol = https
soap_port = 8080

[ruman]

I just pushed a fix to github. Please pull, or apply these changes:

https://github.com/firebus/splunk-jira/commit/bad727cc88b8dca2b2263be1a000de072dc9027a

[sureshprem]

I pulled the changes and now get a different error:

command="jira", No option 'jira_protocol' in section: 'jira'

[sureshprem]

I followed the advice per "enthusiast" and added code in jira.py

if not time_keys:  <-- Added line 
     for k in time_keys:
        v = elem.xpath(k)
logger.info(k)  <-- Added line
        if len(v) == 1:
           row[k] = v[0].get("seconds")

now I get a different error message on the search '| jira "project = COR"

Error:
External search command 'jira' returned error code 1

[ruman]

This sounds like an issue with time_keys being empty that was reported in https://github.com/firebus/splunk-jira/issues/13 which I haven't had a chance to verify yet.

You can try the workaround suggested by enthusiast near the end of the thread. I will verify, open a new issue, and fix ASAP.

[sureshprem]

I followed the advice per "enthusiast" and added code in jira.py

if not time_keys: <-- Added line
for k in time_keys:
v = elem.xpath(k)
logger.info(k) <-- Added line
if len(v) == 1:
row[k] = v[0].get("seconds")
now I get a different error message on the search '| jira "project = COR"

Error:
External search command 'jira' returned error code 1