Azure DevOps Daily Commits Info in Splunk

[ps23]

Has anyone tried this add-on to pull the tfs commits into Splunk via Azure DevOps (Git Activity) - Technical Add-On. I tried installing this app on one of the heavy forwarder but inputs section of this add-on does not work.

[ps23]

This helped, there were few more errors in the python which I fixed too. Thanks 

[isoutamo]

Hi

Have you configured the Add-On or just try to add new inputs? Usually you must 1st create connection to your Azure and correct organisation. 

Azure organization is your own AzureDevOps organisation what ever it's, not tenant eg. in Entra ID. Then you must create your own security token under that DevOps organization/project, which has enough access to get that information.

Then it seems that those python scripts have not tested enough. As all python libraries are under separate lib directory (correctly) not in bin directory, they must be additional path in those scripts. Otherwise it cannot found needed libraries.

I fixed it on my test env like

import os
APP_LIB_FOLDER = os.path.join(os.path.dirname(__file__), "..", "lib")
sys.path.insert(0, APP_LIB_FOLDER)

Just add those before it try to import e.g. solnlib.

That fix needs to do all those files which are directly used from splunk side.

r. Ismo

[ps23]

The data gets ingested one time only when the inputs are first configured. The interval for the inputs have been set as 3600 still no events are written.   Internal logs shows that inputs are running but no new events are logged.