topic Re: Send request to Service Now in Alerting

Send request to Service Now

saurabhray25 — Tue, 15 Sep 2020 18:43:49 GMT

I am trying to send my error message recorded in Splunk to ServiceNOW via Custom Python Script.

However, I am failing to hit the SNOW URL

1. The Python Script is getting triggered by Splunk and the error messages too have been extracted in a JSON. This is verified.

2. The ServiceNOW endpoint is accessible through Command Prompt or Postman.

3. However, I am failing to hit the URL when it gets triggered by Splunk.

4. The Splunk instance is on-premise and ServiceNOW mid-server has been created for communication.

I doubt if this is any tunneling issue. The request does not gets triggered only when executed from SPLUNK

Can anyone assist me with a possible solution?

thambisetty — Wed, 16 Sep 2020 06:33:33 GMT

do you have proxy configured on splunk server?

if yes, connection might be going to proxy and proxy might be blocking the connection.

saurabhray25 — Wed, 16 Sep 2020 10:15:53 GMT

@thambisetty Thank You for your response. Can you guide me on how to check and handle the proxy?

thambisetty — Wed, 16 Sep 2020 10:29:45 GMT

SSH to Splunk Server.

switch user to user splunk running with.

see connected to in the output whether that is servicenow IP or proxy IP