ServiceNow integration password for service account

[EDeeMo1007]

Our ServiceNow and Splunk integration has worked seamless for a few years.  Today we started getting this error in Splunk:  "Unable to update ServiceNow incident. ServiceNow API credentials are invalid"

I have reset the ServiceNow service account password (generated by ServiceNow) and after entering the password in Splunk I get "Could not save ServiceNow settings"

I have tried multiple passwords generated by ServiceNow because I cannot manually set this in ServiceNow.  Does anyone know if Splunk has limitations on the password?

[danielbb]

A few questions to better understand your issue:

• When you get the “Could not save ServiceNow settings” error, are there any detailed error messages or logs from Splunk?
• Have you verified the new password works by testing the ServiceNow API directly outside of Splunk?
• Is the service account still active and has the required permissions to update incidents via the API?
• Were there any recent changes in Splunk or ServiceNow configurations related to this integration?

Answers to these will help pinpoint the cause.

[livehybrid]

In addition to the frontend errors you are seeing, are there any errors in the Splunk logs? Check your _internal log or $SPLUNK_HOME/var/log/splunk/splunkd.log for other errors relating to this app, is there any more specific errors? 

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful

• Marking it as the solution if it resolved your issue

• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.