How to apply a filter on events before it gets into Splunk Indexer from ServiceNow based of particular field value ?

[vikaschoudhary]

I am using "Splunk app for Servicenow" & "Splunk add-on for ServiceNow" which is integrated with ServiceNow.
I want to extract only those incidents in Splunk indexer (snow) from ServiceNow where "assignment_group" = "XYZ" or "ABC"
Currently it is extracting million of events in Splunk from ServiceNow Incidents.

[ehaddad_splunk]

Not an option in the add-on itself and not sure if SNOW API allows it. You can add a props entry to filter unwanted incidents and send them to null Queue.
https://answers.splunk.com/answers/59370/filtering-events-using-nullqueue.html