Alerting

Send request to Service Now

saurabhray25
Engager

I am trying to send my error message recorded in Splunk to ServiceNOW via Custom Python Script.

However, I am failing to hit the SNOW URL

 

1. The Python Script is getting triggered by Splunk and the error messages too have been extracted in a JSON. This is verified.

2. The ServiceNOW endpoint is accessible through Command Prompt or Postman.

3. However, I am failing to hit the URL when it gets triggered by Splunk.

4. The Splunk instance is on-premise and ServiceNOW mid-server has been created for communication.

 

I doubt if this is any tunneling issue. The request does not gets triggered only when executed from SPLUNK

 

Can anyone assist me with a possible solution?

Labels (2)
0 Karma

thambisetty
SplunkTrust
SplunkTrust

SSH to Splunk Server.

switch user to user splunk running with.

curl -k -v https://company.service-now.com

see connected to in the output whether that is servicenow IP or proxy IP

————————————
If this helps, give a like below.
0 Karma

saurabhray25
Engager

@thambisetty  Thank You for your response. Can you guide me on how to check and handle the proxy?

0 Karma

thambisetty
SplunkTrust
SplunkTrust

do you have proxy configured on splunk server?

if yes, connection might be going to proxy and proxy might be blocking the connection.

————————————
If this helps, give a like below.
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...