All Apps and Add-ons

Splunk App and Add-on for ServiceNow: How to get the correct names of the assignment_group and assigned_to for incidents?

skender27
Contributor

Hi,

I set up the app and add-on for ServiceNow (Fuji), but I still cannot get the right names for the assignment groups and assigned_to who opened, created or closed the incidents in the Incident Performance dashboard.
Instead, I get the sys_id of those groups and users (something like assignment_group=de3eada60f410200d764b97ce1050e6c)...
It should be something in the automatic lookup tables.

Has anyone had the same problem?

Thanks,
Skender K.

0 Karma
1 Solution

jcoates_splunk
Splunk Employee
Splunk Employee

HI, that needs a lookup. Go to Settings -> Searches, reports, and alerts. Set the app context to Splunk Add-on for Service Now, and enable the searches.

View solution in original post

jcoates_splunk
Splunk Employee
Splunk Employee

HI, that needs a lookup. Go to Settings -> Searches, reports, and alerts. Set the app context to Splunk Add-on for Service Now, and enable the searches.

skender27
Contributor

Hi Jcoates,

Thank you very much, indeed.
Now it works all fine. I had forgotten to activate those search to the SNow tables...

Well done,
Skender

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...