Hi,
We have created a saved search in-order to trigger from this eventtype=snow_ta_collector_error OR eventtype=snow_ta_log_error. Based on this, we could there were continuous email with this error message are getting triggered. when searched in the ta_snow_main.log found the below message.
index=_internal sourcetype=ta_snow source="/opt/splunk/var/log/splunk/splunk_ta_snow_main.log"
2018-06-11 07:19:44,265 ERROR pid=57217 tid=Thread-18 file=snow_data_loader.py:do_collect:169 | Failed to connect https://test.service-now.com/api/now/table/cmdb_rel_ci?sysparm_display_value=false&sysparm_limit=100..., reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_data_loader.py", line 161, in _do_collect
"Authorization": "Basic %s" % credentials
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/init_.py", line 1593, in request
(response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
Kindly guide me on to troubleshoot the issue.
