Splunk suddenly facing problem ingesting Snow data through Splunk addon from ServiceNow

[RAVIKR]

Here is the error I am getting . Splunk was ingesting Snow data suddenly throws error below:

we did check by increasing the limit and accessing the URL. All seems OK

pid=23768 tid=Thread-1 file=snow_data_loader.py:_do_collect:127 | Failed to connect "URL"/contract_sla.do?JSONv2&sysparm_query=sys_updated_on>=2018-03-06+11:31:16^ORDERBYsys_updated_on&sysparm_record_count=10000, reason=Unauthorized

[xpac]

Hey, the solution is in the error message: reason=Unauthorized
It might mean your password expired, your account was locked or deleted, anything like this. Your ServiceNow admins can most likely tell you more about this.

Hope that helps - if it does I'd be happy if you would upvote/accept this answer, so others could profit from it. 🙂