Alerting

Send request to Service Now

saurabhray25
Engager

I am trying to send my error message recorded in Splunk to ServiceNOW via Custom Python Script.

However, I am failing to hit the SNOW URL

 

1. The Python Script is getting triggered by Splunk and the error messages too have been extracted in a JSON. This is verified.

2. The ServiceNOW endpoint is accessible through Command Prompt or Postman.

3. However, I am failing to hit the URL when it gets triggered by Splunk.

4. The Splunk instance is on-premise and ServiceNOW mid-server has been created for communication.

 

I doubt if this is any tunneling issue. The request does not gets triggered only when executed from SPLUNK

 

Can anyone assist me with a possible solution?

Labels (2)
0 Karma

thambisetty
SplunkTrust
SplunkTrust

SSH to Splunk Server.

switch user to user splunk running with.

curl -k -v https://company.service-now.com

see connected to in the output whether that is servicenow IP or proxy IP

————————————
If this helps, give a like below.
0 Karma

saurabhray25
Engager

@thambisetty  Thank You for your response. Can you guide me on how to check and handle the proxy?

0 Karma

thambisetty
SplunkTrust
SplunkTrust

do you have proxy configured on splunk server?

if yes, connection might be going to proxy and proxy might be blocking the connection.

————————————
If this helps, give a like below.
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...