Splunk Search

Get list of all jiras with project name and issuetype

nukarajusundeep
New Member

I am using this query but I am not getting any data

| jirarest jqlsearch "project = CHANGE AND issuetype in ("App Code", "PaaS" , "Arch", "CR-PaaS Maint", "CR-Akamai")"

when I use the for single jira it is working
| jirarest jqlsearch "project = CHANGE AND "KEY"="CHANGE-88778""
this is returning the value

What is the mistake i am doing

Tags (1)
0 Karma

nukarajusundeep
New Member

it is working now thanks I figured out the issue single quotes are working and the query is taking a long time retrieve the data in splunk

0 Karma

nukarajusundeep
New Member

I tried escape slashes also but it did not work for me

Note: so basically the data is not in splunk we are using jirarest plugin in splunk which will fetch the data from jira using jirarest ideally jqlquery should work which is not working in my case

0 Karma

gaurav_maniar
Builder

The issue is with unbalanced quotes "".
Try the below queries,

| jirarest jqlsearch "project=CHANGE AND issuetype in (\"App Code\", \"PaaS\" , \"Arch\", \"CR-PaaS Maint\", \"CR-Akamai\")"

and

| jirarest jqlsearch "project=CHANGE AND KEY=\"CHANGE-88778\""

all the programming languages and tools follow nested quotation rules.
as per the rule, all sub-level quotes should be escaped (using \\)

0 Karma

nukarajusundeep
New Member

@gaurav that's right initially I used escape slashes but it did not return any data

Note: jira data is not in SPlunk, here we are using jirarest splunk plugin to do a rest call to jira and get the data

Here the issue is with the jqlsearch format looks like not sure how to make it work

0 Karma

renjith_nair
Legend

@nukarajusundeep, whats the issue type of "KEY"="CHANGE-88778"" ?
Do you have the mentioned issue types in CHANGE Project ?

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

nukarajusundeep
New Member

yes each jira will have issuetype

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...