All Apps and Add-ons

Add-on for JIRA - modular input configuration

ealmeida_splunk
Splunk Employee
Splunk Employee

I faced this issue and found the solution so posting the problem and solution here to help others that may be having the same problem.

Add-on for JIRA is installed and executes fine on-demand with config.ini when using things like:

| jira jqlquery "Project='test'"

However, trying to use the modular input it throws this error every execution:

2019-09-04 19:29:51,497 ERROR pid=6324 tid=MainThread file=base_modinput.py:log_error:69 | Get error when collecting events.
Traceback (most recent call last):
File "/opt/splunk/etc/apps/jira/bin/libs/modinput_wrapper/base_modinput.py", line 173, in stream_events
self.collect_events(inputs, ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 312, in collect_events
self.sync(ew)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 112, in sync
events = self.get_jira_events(data)
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in get_jira_events
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/etc/apps/jira/bin/jira.py", line 147, in
v) for k, v in self.input_items.iteritems()}
File "/opt/splunk/lib/python2.7/urllib.py", line 1285, in quote
raise TypeError('None object cannot be quoted')
TypeError: None object cannot be quoted

The list of wanted fields is configured properly in jira.conf and inputs.conf.

0 Karma
1 Solution

ealmeida_splunk
Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

View solution in original post

0 Karma

thomas_art
Path Finder

Does anyone know how to import Jira data with accented marks to splunk with Jira Collector?

0 Karma

ealmeida_splunk
Splunk Employee
Splunk Employee

@mpipaliya_splunk was able to help me with this issue and find a solution. Big shout out to him!

Below steps helped troubleshoot:
* Clear checkpointing for JIRA add-on (when trying multiple times execute between each attempt)
sudo su - splunk
/opt/splunk/bin/splunk clean kvstore -app jira -collection jira_checkpointer

  • Have a proper JQL that is first validated via JIRA Search.
    JQL used: project in (test)

  • Assigned proper sourcetype manually (jira), as automatic sourcetype assignment was failing with code exception.

  • Verified ingested JIRA types under test project key.
    index=test sourcetype=jira | stats count by fields.issuetype.name

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...