All Apps and Add-ons

I am unable to index ServiceNow database table

Explorer

Hi ,
I have splunk enterprise in linux environment . And I am using with service-now integration. For that i am using Splunk add-on for service-now.
I want to index database tables from service now for example - "incident". But incident is predefined added into splunk which we need to enable. I have enabled the incident table and i am able to parse through the incidents in incidents table in servicenow.
Now i want to add another table from service now to work on from splunk.
so i added another table as
settings-> data inputs-> under local inputs splunk add-on for service-now -> new.
i have filled the name as "task_survey" which is name of a table in service-now and interval 5 sec.
after i checked its enabled or not. Now when i try to search some data from table i am getting no results found, whereas when i search some thing from incident table i am able to get results.
Is there anything else needed to be done for getting the table data into splunk or what..
I am new to splunk so pls try to explain little elaborately

0 Karma
1 Solution

Splunk Employee
Splunk Employee

Hi Vamsi92,

Check to make sure that the account that you are using to integrate with your ServiceNow instance from the Splunk platform has read-only (at least) permissions to your "task_survey" table. You may need to create an additional access control rule just for this table, as well as for any other custom tables that you want to add.

See steps 7 and 8 here for more details:
http://docs.splunk.com/Documentation/AddOns/latest/ServiceNow/ConfigureServiceNowtointegratewithSplu...

Please let us know if that solves the issue!

View solution in original post

Splunk Employee
Splunk Employee

Hi Vamsi92,

Check to make sure that the account that you are using to integrate with your ServiceNow instance from the Splunk platform has read-only (at least) permissions to your "task_survey" table. You may need to create an additional access control rule just for this table, as well as for any other custom tables that you want to add.

See steps 7 and 8 here for more details:
http://docs.splunk.com/Documentation/AddOns/latest/ServiceNow/ConfigureServiceNowtointegratewithSplu...

Please let us know if that solves the issue!

View solution in original post