All Apps and Add-ons

Issues with Splunk Add-on for ServiceNow configuration

blinkage
New Member

During GUI-setup it will not connect to http:// (have also tried with FQDN.
The snow-main.log says "certificate validation error", but as there is no S in the http, no certificate validation should be required.
Anyone have any experience with this?

Thanks for your time.

0 Karma

splunk4now
Explorer

Are you indicating that the SNOW endpoint is not secure and it is on-premise dev server without any secure certificate ? Did you try configuring it in the conf file as per documentation below ?
http://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Setuptheadd-on

Even if this leads to the same problem then some work around might have to be done in order to accept configuration for http. The python code that is available in the add-on does seem generic but have not had a chance to see what configurations can be passed to override it

0 Karma

blinkage
New Member

we have done some more troubleshooting and installed a certificate, and still cant get it to work.

what we are left with is a new user with the same name and password as we created on the servicenow instance. Because i saw some authentication errors to 127.0.0.1/somepath to snow/

when we added a user in splunk with the same credentials as in servicenow these errors disappeared.
I can access the urls via curl and the xml lists fine.

we are now left with these errors:

ERROR pid=13056 tid=MainThread file=configure.py:reload_confs:288 | Failed to refresh https://127.0.0.1:8089/servicesNS/-/-/configs/conf-service_now/_reload, reason=
ERROR pid=13056 tid=MainThread file=rest.py:splunkd_request:49 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_snow/configs/conf-service_now, errcode=unknown, reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/framework/rest.py", line 47, in splunkd_request
headers=headers, body=data)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/init.py", line 1593, in request
(response, content) = self.request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1335, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1257, in _conn_request
conn.connect()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init_.py", line 1060, in connect
raise socket.error, msg
error: [Errno 111] Connection refused

ERROR pid=13056 tid=MainThread file=rest.py:splunkd_request:49 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_snow/configs/conf-service_now, errcode=unknown, reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/framework/rest.py", line 47, in splunkd_request
headers=headers, body=data)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/init.py", line 1593, in request
(response, content) = self.request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1335, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1257, in _conn_request
conn.connect()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init_.py", line 1060, in connect
raise socket.error, msg
error: [Errno 111] Connection refused

2017-08-18 14:22:04,891 ERROR pid=13056 tid=MainThread file=rest.py:splunkd_request:49 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_snow/configs/conf-service_now, errcode=unknown, reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/framework/rest.py", line 47, in splunkd_request
headers=headers, body=data)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/init.py", line 1593, in request
(response, content) = self.request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1335, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1257, in _conn_request
conn.connect()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init_.py", line 1060, in connect
raise socket.error, msg
error: [Errno 111] Connection refused

Webgui reports:
Failed to update /servicesNS/nobody/Splunk_TA_snow/service_now_setup/snow_proxy/snow_proxy

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...