You will need an api key and token from Trello to use this Add-On. If you do not already have this, please go to https://developers.trello.com to convert your trello account to a developer account and obtain this information. Please note your account needs access to any board for which you wish to extract data from.
Installation is as standard for a Splunk Add-On.
After installation, please use the following steps as a guide
1. Open the Add-On and select Configuration
2. Open the Add-on settings and enter your key and token supplied by Trello when you enabled your account for development.
3. Go to Inputs and Create a New Input. The following inputs are available ingestion.
Boards (Calling https://api.trello.com/1/boards/{id})
Lists (Calling https://api.trello.com/1/boards/{id}/lists)
Cards (Calling https://api.trello.com/1/boards/{id}/cards)
Checklists (Calling https://api.trello.com/1/boards/{id}/checklists)
Members (Calling https://api.trello.com/1/boards/{id}/members)
4. Ensure you obtain the board id from Trello. This can be found in the Trello JSON export for the board (Show Menu > More > Print and Export > Export as JSON) entitled ID.
Each input will store collected data in sourcetype trello:{input type}.
It's reccomended that you specify the parental ID's when collecting information for multiple inputs. The following list details the links between inputs
Lists > Boards: idBoard - BoardId
Cards > Lists: idList - ListId
Cards > Members: idMembers[] - MemberId
Cards > Checklists: idCheckLists[] - idCheckList
Should you fail to get any data into Splunk, please follow the following steps.
Please search in the _internal index for "trello". This should retrive all activity information relating to the Add-On and should shed some light on your issue
You may also want to test your connection to ensure it works using a separate tool to test the API directly. The url you will need to call will be https://api.trello.com/1/boards/{id}?key={your API key}&token{your Token} using the GET method.
Should you need further assistance, please contact me directly and I will eneavour to assist where possible.
If there's anything that you would like to see going forward, please let me know and I will gladly look to incorporate your suggestions into further updates.
New Field Aliases for DevSplunkOps
Pass AppInspect
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.