Splunk Add-on for ServiceNow: Why am I getting error "Failed to get service_now.conf" after setup in Splunk 6.2.2?

[sbrice]

I installed the Splunk Add-on for ServiceNow Splunk_TA_snow and followed these steps:

Set up the add-on using service_now.conf
Follow these steps to set up the add-on using service_now.conf.

1. Go to $SPLUNK_HOME/etc/apps/Splunk_TA_snow and make a new directory called /local.

2. Copy Splunk_TA_snow/default/service_now.conf to $SPLUNK_HOME/etc/apps/Splunk_TA_snow/local.

3. Configure the values according to the table, then save the local version of the file.

After restarting the Search Head, I am seeing this error in the ta_snow.log:

2015-06-09 08:25:17,618 INFO 139681163286272 - Start Snow TA
2015-06-09 08:25:17,658 ERROR 139681163286272 - Failed to get service_now.conf
2015-06-09 08:25:17,658 ERROR 139681163286272 - Failed to setup config for Snow TA: Failed to get service_now.conf
2015-06-09 08:25:17,658 ERROR 139681163286272 - Traceback (most recent call last):
  File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow.py", line 84, in run
    snow_conf = snow_config.SnowConfig()
  File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 38, in __init__
    default_configs = self._get_default_configs()
  File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 78, in _get_default_configs
    raise Exception("Failed to get service_now.conf")
Exception: Failed to get service_now.conf

[hitesh_kanchan · Accepted solution]

Its actually due to the permission settings in the ServiceNow. I am able to access ServiceNow once the permission is modified there.

[hitesh_kanchan]

Were you able to resolve this issue. I am facing similar kind of problem. We use a proxy to connect to the Internet (ServiceNow).

[jcoates_splunk]

that sounds like a systems level permission problem.