All Apps and Add-ons

After changing the retention date on the indexes, why has the Splunk App for Jenkins stopped showing results after this weekend?

erosch
Explorer

Splunk App for Jenkins was showing everything correctly last week (all graphs, dropdowns, test results showed correctly). Today, there are no results in the graphs and I cannot select any job, no test results, Jenkins health, or Jenkins slave tabs.

Only 2 things works today:
1. In all the tabs (views), Jenkins Master field can auto-complete with my Jenkins master hostname. But after selecting, I can't select jobs
2. Audit Trail >Jenkins Config Contents

The Jenkins plugin seems to be working correctly because I can see today's data when I do a search such as:
Example 1:

index=jenkins_statistics

This is returning realtime events with event_tag: slave and event_tag: queue, they have sourcetype: json:jenkins for all events
Example 2:

index=jenkins

This is returning realtime events with event_tag: build_report, all events have sourcetype: json:jenkins

Only changed I remember doing on Friday was the retention days on the indexes...
I changed the indexes (jenkins, jenkins_console, jenkins_statistics, jenkins_artifacts) to retention of 1 day on Friday. All data before Friday is gone (today is Monday, it's been 3 days) which is expected, but I am expecting today's data to show in the app, but it's not.

I am using Splunk Cloud
Splunk App for Jenkins, App Version 1.0.2, App Build 1
Jenkins plugin 1.3.1

0 Karma
1 Solution

erosch
Explorer

Data sent to splunk was good. So I just asked support to reinstall the app and now everything works again.

View solution in original post

0 Karma

erosch
Explorer

Data sent to splunk was good. So I just asked support to reinstall the app and now everything works again.

0 Karma

txiao_splunk
Splunk Employee
Splunk Employee

Most Query in Splunk App for Jenkins is not Realtime search, can you try non-realtime search using
index=jenkins* earliest=-1d

If the data is not expected, you may need check index config | rest /services/data/indexes

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...