topic Re: Integration with service now in Getting Data In

Integration with service now

mokshubajaj — Thu, 13 Jun 2013 07:10:21 GMT

Can Splunk be integrated with service now

Re: Integration with service now

ccsfdave — Thu, 26 Sep 2013 18:16:13 GMT

Have you seen the app: http://apps.splunk.com/app/1228 ? I am sorta in the same boat looking for how our new implementation of Service Now will be best consumed by Splunk. If you need it and when I find more, I would be more than happy to share

Re: Integration with service now

bwindham — Tue, 05 Nov 2013 18:33:34 GMT

Did you get Splunk to integrate with your Service Now instance? I am at that point now. I have added the app, created a user in SN and given SOAP roles, added the user login/password in passwd.conf and tried manually. Command I am running is "snow instance=.service-now.com request=incident action=query".

But I continue to get no results.
Any help would be appreciated.

Re: Integration with service now

ccsfdave — Tue, 05 Nov 2013 18:38:57 GMT

Unfortunately, we are still in UAT testing so there is no implementation yet. When we do, which should be w/in a week or two, I will post on our experience

Re: Integration with service now

dbourg_splunk — Thu, 01 May 2014 14:55:55 GMT

@bwindham, We've posted a new app that is quite easy to use. The setup is accomplished via the GUI (or manually edit the conf files if you prefer). You can find it here:

Re: Integration with service now

a2ay — Sat, 30 Jul 2016 04:19:03 GMT

can you let me know how it need to be configured to get all the required tables of snow in Splnukapp?

Re: Integration with service now

a2ay — Tue, 29 Sep 2020 10:51:05 GMT

yeap integration done..the only thing that issue have with receiving fields...for example in these fileds in splunk app "opened_by, assigned_to, resolved_by" getting garbade value like 864b0ae40fc12500ce8a5bd69asas.

Re: Integration with service now

ccsfdave — Tue, 30 Aug 2016 15:34:19 GMT

@a2ay Actually those "garbage" values are the system numbers that correspond to the users of the system. I thought this was true but verified it by looking at index=snow |table assigned_to assignment_user_username

Let me know if you agree.

Re: Integration with service now

ccsfdave — Tue, 30 Aug 2016 15:39:52 GMT

I doubt 3 yr later this is still an issue but seriously, that is how long it took us to finally integrate they systems.

Re: Integration with service now

SanthoshKandadi — Tue, 29 Sep 2020 11:05:50 GMT

How to get the garbage values to display the actual values for fields assigned_to assignment_user_username?

Re: Integration with service now

desoto-chan — Tue, 16 Nov 2021 17:44:16 GMT

yep, it can be integrated. it's mostly used for events/incidents. look at the docs here: Configure ServiceNow to integrate with the Splunk platform - Splunk Documentation for further details (+ there are also video tutorials). I've used it, worked perfectly. in case you seek additional help (an external one) - there are plenty of tools available on the market to connect the systems. tools like trayio and zigiosp can help you, too. I've used them both. but I'm current using the latter for such instances.