Splunk add-on for servicenow - additional fields

[ADRIANODL]

Hi all,
We've just installed the Splunk Add-on for ServiceNow on our Splunk Cloud instance, which enables integration between the the two platforms.
The integration itself worked well, and alerts have been successfully configured to trigger an incident in Service Now. However, the ServiceNow Incident Integration add-on comes with a limited number of fields (state, CI, Contact Type, Assignment Group, Category, Subcategory, Short Description, Correlation ID), which doesn't pre-populate the incident with enough information for our teams to work on the incidents. Whenever an incident is triggered, they need to log on to splunk cloud to see more details about the incident.

My question is: is there a way to add additional fields to the ServiceNow Incident Integration add-on, such as severity, long description, etc)?

Thank you for your responses in advance.

Adriano

[koshyk]

Can you please check if this is still the case? With new version of SNOW and addon, we are getting all extra data

[ChrisBell04]

@koshyk - what new version? Splunk Add-on for ServiceNow Version 3.1.0 was last updated April 6, 2018.

For what its worth, there has been no communication about enhancement request ADDON-17893 either.

[koshyk]

sorry I meant the ServiceNow version too. Jakarta/London versions are emitting too much data, especially fields starting with dv_*
We are receiving about 60+ fields for incident table

[ChrisBell04]

Enhancement request ADDON-17893 has been filed to add the Description field to incident creation.

[tommoore]

What's the status on this?