I had a similar issue, just update the version string in gigamon.xml from 7.1.1 to 7.2.0 then restart Splunk 🙂   ... View more

@amksa Please upgrade to the version 1.0.8 of the add-on, that was published on Splunk Base. This version will allow you to define the Components field in the custom field section, without its section to be managed as characters to be protected. (the reason why it failed when you attempted to do so.) Assuming your JIRA admins allowed the field to be defined in the screens, and you input values format accepted by your JIRA, this will fix your issue. Let me know if any further issue. Guilhem ... View more

Can you please expound on that update? What does "adding TA" mean? ... View more

Thanks tomaszpiekos , that is the exactly what I did "audit.log* and it worked! ... View more