Alerting

Send request to Service Now

saurabhray25
Engager

I am trying to send my error message recorded in Splunk to ServiceNOW via Custom Python Script.

However, I am failing to hit the SNOW URL

 

1. The Python Script is getting triggered by Splunk and the error messages too have been extracted in a JSON. This is verified.

2. The ServiceNOW endpoint is accessible through Command Prompt or Postman.

3. However, I am failing to hit the URL when it gets triggered by Splunk.

4. The Splunk instance is on-premise and ServiceNOW mid-server has been created for communication.

 

I doubt if this is any tunneling issue. The request does not gets triggered only when executed from SPLUNK

 

Can anyone assist me with a possible solution?

Labels (2)
0 Karma

thambisetty
SplunkTrust
SplunkTrust

SSH to Splunk Server.

switch user to user splunk running with.

curl -k -v https://company.service-now.com

see connected to in the output whether that is servicenow IP or proxy IP

————————————
If this helps, give a like below.
0 Karma

saurabhray25
Engager

@thambisetty  Thank You for your response. Can you guide me on how to check and handle the proxy?

0 Karma

thambisetty
SplunkTrust
SplunkTrust

do you have proxy configured on splunk server?

if yes, connection might be going to proxy and proxy might be blocking the connection.

————————————
If this helps, give a like below.
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...