Hi , We are planning to integrate Splunk with ServiceNow and we could see data is not indexing.
We installed Splunk App for ServiceNow and Splunk Add-on for ServiceNow to one of our search heads and configured the setup successfully with the credentials provided by our SN team, still we are seeing details .
Below is one of the error we are seeing in log files.
2016-12-02 08:43:47,035 ERROR pid=7280 tid=Thread-4 file=thread_pool.py:_run:259 | Traceback (most recent call last):
File "/apps/web/splunk/etc/apps/Splunk_TA_snow/bin/framework/thread_pool.py", line 257, in _run
func()
File /etc/apps/Splunk_TA_snow/bin/snow_job_factory.py", line 38, in __call__
sc.DEFAULT_RECORD_LIMIT))
File "/apps/web/splunk/etc/apps/Splunk_TA_snow/bin/snow_data_loader.py", line 124, in collect_data
jobjs = self._json_to_objects(content)
File "/apps/web/splunk/etc/apps/Splunk_TA_snow/bin/snow_data_loader.py", line 175, in _json_to_objects
return json.loads(json_str)
File "/apps/web/splunk/lib/python2.7/json/__init__.py", line 338, in loads
return _default_decoder.decode(s)
File "/apps/web/splunk/lib/python2.7/json/decoder.py", line 366, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/apps/web/splunk/lib/python2.7/json/decoder.py", line 384, in raw_decode
**raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded**
Can someone please help us on this.
Any other reasons why this could be happening? I've got a similar issue now. I can't import any of the tables.
Make sure the URL that you have has nothing after the .com.. That is it should be https://.service-now.com . When I changed this it worked.
This worked for me. The error was the GET response was empty when you are trying to reach the wrong URL.
I have the same issue as well. Can someone help?
has this been resolved as I am getting the same error. Splunk 6.5.2 with ServiceNow Helsinki.