All Apps and Add-ons

Why am I getting this Error while saving data in Splunk Add-on for Service Now?

marziaolla
Path Finder

Hello there,
I got an issue while I'm trying to set up the splunk add-on for SN

Here is the error:
Splunkd daemon is not responding: (u"Error connecting to /servicesNS/nobody/Splunk_TA_snow/apps/local/Splunk_TA_snow/setup: ('The read operation timed out',)",)

I'm using Splunk Enterprise 7.0.1 on Win10.

Can u pls help me to solve this problem?

Thanks.

0 Karma

nick405060
Motivator

I had *I think* the exact same error before my SN API was properly configured by our SN admin. Took a fair amount of effort to get the API set up.

p_gurav
Champion

Hi,

Can you try below changes:

open/create $SPLUNK_HOME/etc/system/local/web.conf and increase the value.

splunkdConnectionTimeout = (default 30 secs)

0 Karma

marziaolla
Path Finder

Hi p_gurav, thanks for your help, i've tried to add the splunkdConnectionTimeout as u wrote but now i'm having this error:

Error while posting to url=/servicesNS/nobody/Splunk_TA_snow/service_now_setup/snow_proxy/snow_proxy

0 Karma

nick405060
Motivator

I get that error too. The URI p_gurav posted above is the correct question relevant to the error we're getting. No comments have been posted on how to fix it yet though that work.

0 Karma

p_gurav
Champion
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...