https://community.splunk.com/t5/Splunk-Enterprise-Security/ServiceNow-Event-Integration/m-p/568779#M10326 <P>Hi Splunkers, How to create Incidents on SNOW from Splunk SPL? We have "ServiceNow Event Integration" alert action in use which creates incidents when an alerts triggers an event but trying to use the same from Splunk search.</P><P>Tried using sendalert command as below and got an error:</P><P>| sendalert servicenow param.severity="4" param.assigned_to="Assignment group" param.short_description="Alert Name" param.description="This is a test"<BR />param.u_environment="Dev" param.node=hostname param.resource="Nothing" param.type="Name"</P><P>Error:&nbsp;Error in 'sendalert' command: Alert action "Servicenow" not found.</P> Tue, 28 Sep 2021 15:47:00 GMT vamshikn72 2021-09-28T15:47:00Z https://community.splunk.com/t5/Splunk-Enterprise-Security/ServiceNow-Event-Integration/m-p/568779#M10326 <P>Hi Splunkers, How to create Incidents on SNOW from Splunk SPL? We have "ServiceNow Event Integration" alert action in use which creates incidents when an alerts triggers an event but trying to use the same from Splunk search.</P><P>Tried using sendalert command as below and got an error:</P><P>| sendalert servicenow param.severity="4" param.assigned_to="Assignment group" param.short_description="Alert Name" param.description="This is a test"<BR />param.u_environment="Dev" param.node=hostname param.resource="Nothing" param.type="Name"</P><P>Error:&nbsp;Error in 'sendalert' command: Alert action "Servicenow" not found.</P> Tue, 28 Sep 2021 15:47:00 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/ServiceNow-Event-Integration/m-p/568779#M10326 vamshikn72 2021-09-28T15:47:00Z https://community.splunk.com/t5/Splunk-Enterprise-Security/ServiceNow-Event-Integration/m-p/568796#M10327 <P>Have a look at this</P><P>&nbsp;</P><P><A href="https://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Usecustomsearchcommands" target="_blank">https://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Usecustomsearchcommands</A></P> Tue, 28 Sep 2021 16:38:48 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/ServiceNow-Event-Integration/m-p/568796#M10327 somesoni2 2021-09-28T16:38:48Z