All Apps and Add-ons

question regarding aggregation with Splunk/Servicenow

multiverse
Engager

Hi Ron,

I am a neophyte to both Splunk and Servicenow. I have installed your app, and ran a few examples. Works great, nice job. It has fallen to me to integrate the two, and so far so good. But I am stuck on understanding how to leverage your app in regards to aggregate. There is is precious little knowledge, and I assume this is something I should know, but don't. Could you offer a novice explanation with a couple of novice examples please?

Thanks!

0 Karma

Ron_Naken
Splunk Employee
Splunk Employee

There doesn't appear to be much information on how to use aggregate functions for ServiceNow, after glancing through the ServiceNow wiki. There are examples of how to use some of the aggregate functions (i.e. SUM, AVG, COUNT, MIN, MAX) with "having" and "group by" clauses. Here's a link to the wiki that describes aggregates and provides examples:

http://wiki.servicenow.com/index.php?title=Direct_Web_Service_API_Functions

The in-app help for the ServiceNow app provides an example of how to use aggregates within Splunk. Note that you will also need to activate the Aggregate Web Services Plug-In in your ServiceNow portal:

http://wiki.servicenow.com/index.php?title=Activating_ServiceNow_Plugins
0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...