All Apps and Add-ons

Splunk Add-on for ServiceNow: Why am I getting error "Failed to get service_now.conf" after setup in Splunk 6.2.2?

sbrice
Explorer

I installed the Splunk Add-on for ServiceNow Splunk_TA_snow and followed these steps:

Set up the add-on using service_now.conf
Follow these steps to set up the add-on using service_now.conf.

  1. Go to $SPLUNK_HOME/etc/apps/Splunk_TA_snow and make a new directory called /local.

  2. Copy Splunk_TA_snow/default/service_now.conf to $SPLUNK_HOME/etc/apps/Splunk_TA_snow/local.

  3. Configure the values according to the table, then save the local version of the file.

After restarting the Search Head, I am seeing this error in the ta_snow.log:

2015-06-09 08:25:17,618 INFO 139681163286272 - Start Snow TA
2015-06-09 08:25:17,658 ERROR 139681163286272 - Failed to get service_now.conf
2015-06-09 08:25:17,658 ERROR 139681163286272 - Failed to setup config for Snow TA: Failed to get service_now.conf
2015-06-09 08:25:17,658 ERROR 139681163286272 - Traceback (most recent call last):
  File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow.py", line 84, in run
    snow_conf = snow_config.SnowConfig()
  File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 38, in __init__
    default_configs = self._get_default_configs()
  File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 78, in _get_default_configs
    raise Exception("Failed to get service_now.conf")
Exception: Failed to get service_now.conf
0 Karma
1 Solution

hitesh_kanchan
Explorer

Its actually due to the permission settings in the ServiceNow. I am able to access ServiceNow once the permission is modified there.

View solution in original post

hitesh_kanchan
Explorer

Its actually due to the permission settings in the ServiceNow. I am able to access ServiceNow once the permission is modified there.

hitesh_kanchan
Explorer

Were you able to resolve this issue. I am facing similar kind of problem. We use a proxy to connect to the Internet (ServiceNow).

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

that sounds like a systems level permission problem.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...