topic Re: Not receiving auto cut in Splunk Enterprise

Not receiving auto cut

vishwa — Tue, 03 Oct 2023 20:39:13 GMT

I have bunch of alerts, I received email alert, but I did not receive auto cut incident to service now

How to troubleshoot this issue?????

Re: Not receiving auto cut

inventsekar — Wed, 04 Oct 2023 00:04:55 GMT

Hi @vishwa ...

Around when ServiceNow and Splunk integration was done? recent or long back?

the servicenow tickets auto cut(incident creation) was working fine previously

did you do any upgrades recently?(on SH, indexers, the apps, etc)

Re: Not receiving auto cut

vishwa — Wed, 04 Oct 2023 01:10:23 GMT

Around when ServiceNow and Splunk integration was done? recent or long back?

Long back

the servicenow tickets auto cut(incident creation) was working fine previously

Yes it was working fine

did you do any upgrades recently?(on SH, indexers, the apps, etc)

No recent upgraded

Re: Not receiving auto cut

inventsekar — Wed, 04 Oct 2023 02:40:19 GMT

are you not receiving Snow incident tickets only for a particular set of alerts

are you not receiving Snow incident tickets for whole splunk altogether?

Re: Not receiving auto cut

vishwa — Wed, 04 Oct 2023 14:22:33 GMT

I just tried for 4 to 5 alerts it not trigger yesterday

But again I tried today I am getting auto cuts now

Not sure what happened

Re: Not receiving auto cut

inventsekar — Wed, 04 Oct 2023 14:56:11 GMT

the apps/addons sometimes makes our lives difficult by doing like this.

please check the internal logs for that servicenow app/addon... it may give you some hints, if you find the issue.. you can update this post, so in future other users can use your learnings.

karma / upvotes are appreciated by all. thanks.

Re: Not receiving auto cut

vishwa — Tue, 10 Oct 2023 15:21:31 GMT

There was some maintenance activity was there