I am trying to work through getting the Add-on for JIRA working. I have the app installed on the DS pushing to a HF.
Steps I have gone through so far:
| jira
" command in Splunk, but that doesn't work. Receive error: "Unknown search command 'jira'"
Any further steps or information would be extremely helpful! Thanks.
So after tweaking more of this, I confirmed that inputs are coming in. Only 2 events out of probably hundreds. And only ever from one project group. I know that the account I'm using to authenticate has access to many other projects (tested with curl command from server), so I'm not sure why it isn't pulling in more data.
reduce the interval for fetching results.
Interval is currently set at 60. And I can see in the libs_jira.log that every minute it runs it come back with 0 added events. You want me to lower the interval to say 30?
I tried a smaller interval, 30 seconds and this didn't bring in any more events. I increase the interval, to 120 and this brought in a few more events. One thing I noticed though, is the it brings in repeated events. For instance, T-001 has events at 3 different times. Is this because the ticket has been changed?
Yes, If a JIRA ticket modified 3 times you will see 3 events from the same ticket.
Alright. So I guess now my issue is the initial sync doesn't grab all the JIRA tickets. Can you add multiple projects to "default_project" in the jira.conf?
You need to provide JIRA connection detail in apps/JIRA/bin/config.ini
than run |jira jqlsearch "text ~ "splunk""
This should give you results.
The connection details are correct in config.ini as stated in my first point. As I also stated, The "| jira" command comes back as not found.
Don't simply type |Jira, trying writing entire query which i gave you.
|jira jqlsearch "text ~ "splunk""
This should pull all the tickets in JIRA which have splunk in them.
Yes. I tried that as well. Still receive the error: "Unknown search command 'jira'".