I've actually noticed this happening on other masters too and it is generating error messages every second or so which is impacting the Jenkins servers' performance. @txiao_splunk has anyone else reported this issue with the latest version of the Splunk plugin? ... View more

Since I've upgraded Splunk plugin on one of the masters I am seeing the same errors(logs are flooded with them) but only on specific builds: Mar 25, 2020 4:43:51 PM com.splunk.splunkjenkins.utils.LogConsumer run SEVERE: message not delivered:{length:62626 {"host":"xxxxxx","index":"jenkins_console","sourcetype":"text:jenkins","time":"1585154629.437","source":"job/xxxxxxx/job/master/55 ...} com.splunk.splunkjenkins.utils.LogConsumer$SplunkClientError: Bad Request, incorrect index or invalid data format, status code:400 at com.splunk.splunkjenkins.utils.LogConsumer$1.handleResponse(LogConsumer.java:68) at com.splunk.splunkjenkins.utils.LogConsumer$1.handleResponse(LogConsumer.java:40) at shaded.splk.org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:223) at shaded.splk.org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:165) at shaded.splk.org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:140) at com.splunk.splunkjenkins.utils.LogConsumer.run(LogConsumer.java:89) Any idea what could be causing this? ... View more

as we are exporting data to splunkcloud the host name is something like: http-inputs-xx.splunkcloud.com so the HTTP Input Host without the fully qualified domain will not work for us... On some masters we have the latest version of both Jenkins and Splunk plugins. ... View more

sorry for the lack of response on this.thank you. that works great. I have a slight deviation from the standard dataset where the sample data would be like: "Application_daily#Application_nighly#Application_test#Android_daily#Android,nighlty#Android.test#ApplicationData#Application-Field#Application Registry#AUS_ApplicationRegistry#SysTest_Application#EDI_Application#" and I'd like sample_header to equal to Application from sample values like:#AUS_ApplicationRegistry#SysTest_Application#EDI_Application# I guess the best way to achieve this would be a conditional on the drop-down Jenkins host results. ... View more

Hi John, not yet but I'll try the suggestion of using the host input name without fully qualified domain name and let you know if any difference. ... View more

Sorry for the lack of response on this. I'll try the Input Host suggestion and let you know if any difference. ... View more

thank you. having checked a few masters the common ones I can see are: "_", "-", ".", " "(whitespace) So, I think I can use multiple evals in conjunction with mvindex to achieve this. There are a few exceptions where there is no delimiter at all but only data like: ApplicationData ApplicationField ApplicationRegistry or duplicate values like: ApplicationDataApplicationData ApplicationFieldApplicationField but I'll think I'll have to deal with those on a case by case basis. Your suggestion definitely points me in the right direction though. ... View more

There is no specific word or value I can set unfortunately. The only pattern is searching thousands of values, starting with different and same characters. If beginning of the line is the same on multiple lines, stop when there is no longer a match and extract the value. Then carry on searching and do the same for the rest of the values. ... View more

Problem is don't know the value beforehand. ... View more

thank you. the use case I have is querying several Jenkins masters for their job_names. Some job_names start with let's say "Android" some with say "Application". So a search on a Jenkins master would retrieve: Application_daily Application_nighly Application_test Android_daily Android_nighlty Android_test My aim when queering the list above is to end up with 2 values: Application Android I don't want to use specific strings like Android and Application in the regex but rely on matching the beginning of each line instead. Hope this makes sense. ... View more

Let's assume I have this table: <dashboard> <label>dedup/extract</label> <row> <panel> <table> <search> <query>| makeresults | eval sample="FooBarBla,FooBar,FooBar_Brr,foo_bar_brr,foo_bar_grr,foo_bar_gr" | makemv delim="," sample | table sample </query> <earliest>-24h@h</earliest> <latest>now</latest> </search> <option name="count">10</option> </table> </panel> </row> </dashboard> How I can get FooBar and foo_bar extracted as values but without specifying FooBar and foo_bar in any regex? The match needs to be done based on the match at the beginning of each line. ... View more

that worked! thank you! ... View more

Hi @spavin, Thanks for pointing the order out. That helps. However it seems to me the matching condition applies to exact match only. So for instance if I have a graph with several values like: (master), abc-bla-01, abc-foo-01, abc-bla-02,abc-foo-02,abcd002, I'd like the following behavior. clicking on (master) displays a new panel specific to (master) clicking on any value containing "bla" displays a different panel specific to bla and hides the (master) panel clicking on any other value apart from (master) and values containing "bla" hides the panels above and displays something new. The condition match for "bla" works as long as I type in the full value but I was not able to create a condition match which would capture any click.value containing that string. Thanks, Nelu ... View more

workflow related plugins(workflow-job, support, cps) seem to be exactly the same on all masters. workflow-job: Plugin-Version: 2.35 Hudson-Version: 2.138.4 Jenkins-Version: 2.138.4 Plugin-Dependencies: workflow-api:2.36,workflow-step-api:2.20,workflow -support:3.3 workflow-cps: Plugin-Version: 2.74 Hudson-Version: 2.138.4 Jenkins-Version: 2.138.4 Plugin-Dependencies: workflow-api:2.36,workflow-scm-step:2.4,workflow- step-api:2.20,workflow-support:3.3,scm-api:2.2.6,script-security:1.62 ,structs:1.20,support-core:2.43;resolution:=optional,ace-editor:1.0.1 ,jquery-detached:1.2.1 ... View more

@txiao_splunk I have a strange case where for a Jenkins master stages are still attributed to the master instead of the slaves they are running on. Version of Jenkins and Splunk plugins(including the Extension plugin) are exactly the same on 10 masters, 9 of them correctly attribute the stages to the nodes they're running on but one doesn't. The builds structure is more or less the same so I don't think that can be the issue. The build's console definitely has entries like: Running on "hostname bla" but when I check splunk, stages{}.children{}.exec_node is always attributed to the master. Any idea of what can be wrong? ... View more

@danielbarr, did you manage to get this working? I am trying to achieve the same think but without great success... ... View more

thank you. that is very useful. So in my syntax: index=jenkins_statistics host="FQDN-OF-JENKINS_MASTER" event_tag=job_event | rename "stages{}.children{}.exec_node" as exec_node | eval build_on_node=coalesce(exec_node, node) | chart count by build_on_node useother=f | sort -count I can see my jenkins slaves and the "count". However I am not too sure what "count"represents in this case. The number is quite high. For instance there are 60 events and 19420 for "count".Is there a way to display the number of builds in the count field instead of that high number which I am not sure what it represents? appreciate your help. ... View more

@txiao_splunk are you aware of a way of achieving what I have described in my last comment? can I achieve this via a custom dashboard? ... View more

thank you, the spl works. is there a way of displaying the "number of builds" across multiple nodes/slaves over a specific period of time when using pipelines? something similar to visualizing "Build Distribution across Slaves" when for non-pipeline builds? this would be very helpful in identifying if the number of nodes is over or under provisioned. in other words, the "build history" in v1.7.1 is fine for individual nodes but is there a way of visualizing the builds history for all nodes connected to a pipelined master? ... View more

agree with the fact that pipeline is run on master but, as we mentioned, we are interested in information about node steps execution information as well. reason for this is we want to find out if our Jenkins agents are being over/under-utilized and I didn't seem to find a way of displaying that information in the Splunk app for the pipeline builds. silly question, the X in your query should be replaced by the master's hostname? are there quotes required? just ran the query for one of the hosts and no results unfortunately. ... View more