We have a custom Python script that we use to send "event" to service-now from Splunk. This is working fine in Splunk 6.1.8 (Splunk App for ServiceNow 2.4).
The same Python script is not working on Splunk 6.3.0 (latest Splunk App for ServiceNow 4.0.1). The reason we use a custom Python script is because our events module in ServiceNow is a customized one and fields names differ from the standard fuji version.
Please let me know if you have faced the same issue and have a solution.
Creating the event is now part of the Servicenow Add-on and not app.
I would suggest to try with the latest Add-on and see if it works. If you have custom em_event table, that could be an issue here. are any of the custom fields in em_event table required to submit an event? if this is the case, that would be an unsupported scenario.