All Apps and Add-ons

Issues with the Splunk ServiceNow add-on- Not creating incidents?

mark_cet
Path Finder

Hi everyone,

 

I am experiencing some issues with the ServiceNow add-on not creating incidents in ServiceNow. I was able to successfully add the ServiceNow account in Splunk and confirmed that the correct permissions have been granted to the account in ServiceNow.

 

When I try to create an incident for an episode in Splunk ITSI I receive the error:

"Unable to run the action snow_incident. Make sure the action is configured correctly and has all required fields. See the Activity tab of the episode for more information."

 

I checked the Activity log and found the following errors:

"Action="snow_incident" failed with the following error: None search failed for actionId=search..."

"Search command "snowincidentalert" failed to return an incident ID or URL. Check the add-on configuration and input parameters."

 

I also ran the following search as per the Splunk documentation:

eventtype=snow_ticket_error

 

And I see the error:

"ERROR pid=1 tid=MainThread file=snow_ticket.py:_do_event:182 | Failed to connect to https://companydev.service-now.com/https://companydev.service-now.com, error=Traceback (most recent call last):..."

 

I'm not sure why the URL is listed twice in the error. I am able to connect and login to the URL with the account used in Splunk.

 

Has anyone else run into an issue like this before?

 

Thanks.

Labels (2)
0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...