search

guilhemmarchand / TA-jira-service-desk-simple-addon

Atlasian JIRA add-on for Splunk alert actions
11 stars 9 forks source link

Logging issue, not hitting _internal #166

Open GroggyGrunt opened 1 year ago

GroggyGrunt commented 1 year ago

First, great app! the trigger action is a awesome feature!

I have an issue though with the logs not hitting the _internal index (dont have the CIM app). Been reviewing my setup and your code to find the cause, and if im right its because the app sends the events to the "lastchanceindex" and not _internal directly. this is all good, but if its true I would recommend updating the docs to spesify this. As some users (like me) have a defined lastchance/failed index, and I spent a bit of time troubleshooting before realising this.

my fix will be to consider the CIM app or just adding my lastchance to the queries in the app

Thanks!

GroggyGrunt commented 1 year ago

edit, we have the cim app, but not defined any cim_ indexes.. my bad.. :) would still consider an update to the docs to help confused ppl like me..