All Apps and Add-ons

I am unable to index ServiceNow database table

vamsi92
Explorer

Hi ,
I have splunk enterprise in linux environment . And I am using with service-now integration. For that i am using Splunk add-on for service-now.
I want to index database tables from service now for example - "incident". But incident is predefined added into splunk which we need to enable. I have enabled the incident table and i am able to parse through the incidents in incidents table in servicenow.
Now i want to add another table from service now to work on from splunk.
so i added another table as
settings-> data inputs-> under local inputs splunk add-on for service-now -> new.
i have filled the name as "task_survey" which is name of a table in service-now and interval 5 sec.
after i checked its enabled or not. Now when i try to search some data from table i am getting no results found, whereas when i search some thing from incident table i am able to get results.
Is there anything else needed to be done for getting the table data into splunk or what..
I am new to splunk so pls try to explain little elaborately

0 Karma
1 Solution

rpille_splunk
Splunk Employee
Splunk Employee

Hi Vamsi92,

Check to make sure that the account that you are using to integrate with your ServiceNow instance from the Splunk platform has read-only (at least) permissions to your "task_survey" table. You may need to create an additional access control rule just for this table, as well as for any other custom tables that you want to add.

See steps 7 and 8 here for more details:
http://docs.splunk.com/Documentation/AddOns/latest/ServiceNow/ConfigureServiceNowtointegratewithSplu...

Please let us know if that solves the issue!

View solution in original post

rpille_splunk
Splunk Employee
Splunk Employee

Hi Vamsi92,

Check to make sure that the account that you are using to integrate with your ServiceNow instance from the Splunk platform has read-only (at least) permissions to your "task_survey" table. You may need to create an additional access control rule just for this table, as well as for any other custom tables that you want to add.

See steps 7 and 8 here for more details:
http://docs.splunk.com/Documentation/AddOns/latest/ServiceNow/ConfigureServiceNowtointegratewithSplu...

Please let us know if that solves the issue!

Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...