All Apps and Add-ons

Why I am getting this error in logs - file=snow_ticket.py:_do_event:124 | Failed to connect to https://###preview.service-now.com/api/thntm/incident_service/createInc

Installed ServiceNow add-on on SH. Able to fetch the logs from Incident table for testing purpose.

However, while creating INC in SNOW getting error logs:

2019-05-22 05:35:04,824 ERROR pid=10297 tid=MainThread file=snowticket.py:doevent:124 | Failed to connect to https://###preview.service-now.com/api/thntm/incidentservice/createInc, error=Traceback (most recent call last):
File "/opt/splunk/etc/apps/SplunkTAsnow/bin/snowticket.py", line 120, in _doevent
result = self.handleresponse(response, content)
File "/opt/splunk/etc/apps/SplunkTAsnow/bin/snowticket.py", line 208, in _handleresponse
result = self.getresult(resp)
File "/opt/splunk/etc/apps/SplunkTAsnow/bin/snowincidentbase.py", line 62, in getresult
"Incident Number": resp["number"],
KeyError: 'number'

Alert for creating INC:

index="###" host=###
| eval count=1
| eventstats sum(count) AS totalevents by host, Number
| where totalevents > 20
| eval Time=strftime(_time, "%Y-%m-%d %H:%M:%S %p")
| eval Description1="Time: \"" . Time . "\" Hostname: \"" . host . "\" Description: \"" . Description . "\""
| stats count, list(Description1) AS Description values(Number) AS Number by Name totalevents Severity host Security
| nomv Number
| replace "* " WITH ", *" IN Number
| nomv Description
| eval Time=strftime(Time, "%Y-%m-%d %H:%M:%S %p")
| eval summary="Error in Crest ###Server - " . host . " needs immediate attention"
| eval details="Number: \"" . Number . "\" No. of events: \"" . totalevents . "\" Severity: \"" . Severity . "\" Name: \"" . Name . "\" Description: \"" . Description . "\""
| eval assignGroup="GSAM-Z"
| eval opTier1="Malfunction"
| eval opTier2="Error"
| eval prodName="###"
| eval urgency=4
| eval impact=urgency
| fields - Description Hostname totalevents
| dedup Number host
| snowincidentstream

Note: Replaced actual text with ### for security reasons.

0 Karma

New Member

Hi, Have you solved this issue because I've the same problem ?

Regards,
Florent

0 Karma