There is a bug where splunk-devops-plugin doesn't send json files to Splunk.
In pipeline mode, I send a json file to splunk:
step([$class: 'SplunkArtifactNotifier', excludeFiles: '', includeFiles: 'data/jkmaster_installs.json', publishFromSlave: true, sizeLimit: '100MB', skipGlobalSplunkArchive: true])
The console output looks like this when I run the job:
11:41:35 sending files at job level, includes:data/jkmaster_installs.json excludes:11:41:36 sent [/home/jenkins/workspace/slan/plugin-recon/data/jkmaster_installs.json] to splunk in 1 events
However when I try to find my json file in Splunk it is not there.
This bug is present in splunk-devops-plugin version 1.7.2 and higher. I am able to send my json file to Splunk with version 1.7.1. I believe that this commit causes the issue: https://github.com/splunk/splunkforjenkins/commit/10227252b7bed9576995ea0df63b395060773031. When I take out the code from just this commit sending my json file works fine.