I installed the Splunk Add-on for ServiceNow SplunkTAsnow and followed these steps:
Set up the add-on using servicenow.conf
Follow these steps to set up the add-on using servicenow.conf.
Go to $SPLUNKHOME/etc/apps/SplunkTA_snow and make a new directory called /local.
Copy SplunkTAsnow/default/servicenow.conf to $SPLUNKHOME/etc/apps/SplunkTAsnow/local.
Configure the values according to the table, then save the local version of the file.
After restarting the Search Head, I am seeing this error in the ta_snow.log:
2015-06-09 08:25:17,618 INFO 139681163286272 - Start Snow TA 2015-06-09 08:25:17,658 ERROR 139681163286272 - Failed to get service_now.conf 2015-06-09 08:25:17,658 ERROR 139681163286272 - Failed to setup config for Snow TA: Failed to get service_now.conf 2015-06-09 08:25:17,658 ERROR 139681163286272 - Traceback (most recent call last): File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow.py", line 84, in run snow_conf = snow_config.SnowConfig() File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 38, in __init__ default_configs = self._get_default_configs() File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 78, in _get_default_configs raise Exception("Failed to get service_now.conf") Exception: Failed to get service_now.conf
that sounds like a systems level permission problem.
Were you able to resolve this issue. I am facing similar kind of problem. We use a proxy to connect to the Internet (ServiceNow).
Its actually due to the permission settings in the ServiceNow. I am able to access ServiceNow once the permission is modified there.