My Jenkins config.xml file was overwritten. How can I index the events of that system and view the log data?

[Splunk0n]

Hello Splunkers,

My Jenkins config.xml file was overwritten, how can I index the events of that system and view the log data? The time frame is 11/23 thru 11/26, thank you.

[araza_splunk · Accepted solution]

Hi,
You can use the Splunk App for Jenkins together with the Jenkins plugin for Splunk to monitor all config job and plugin config xml files in your Jenkins installation

https://splunkbase.splunk.com/app/3332
https://wiki.jenkins-ci.org/display/JENKINS/Splunk+Plugin+for+Jenkins

Simply go to the 'Audit Trail' panel in the app, and select config.xml from the 'file item' drop down menu.