All Apps and Add-ons

question regarding aggregation with Splunk/Servicenow

multiverse
Engager

Hi Ron,

I am a neophyte to both Splunk and Servicenow. I have installed your app, and ran a few examples. Works great, nice job. It has fallen to me to integrate the two, and so far so good. But I am stuck on understanding how to leverage your app in regards to aggregate. There is is precious little knowledge, and I assume this is something I should know, but don't. Could you offer a novice explanation with a couple of novice examples please?

Thanks!

0 Karma

Ron_Naken
Splunk Employee
Splunk Employee

There doesn't appear to be much information on how to use aggregate functions for ServiceNow, after glancing through the ServiceNow wiki. There are examples of how to use some of the aggregate functions (i.e. SUM, AVG, COUNT, MIN, MAX) with "having" and "group by" clauses. Here's a link to the wiki that describes aggregates and provides examples:

http://wiki.servicenow.com/index.php?title=Direct_Web_Service_API_Functions

The in-app help for the ServiceNow app provides an example of how to use aggregates within Splunk. Note that you will also need to activate the Aggregate Web Services Plug-In in your ServiceNow portal:

http://wiki.servicenow.com/index.php?title=Activating_ServiceNow_Plugins
0 Karma
Get Updates on the Splunk Community!

Splunk Education - Fast Start Program!

Welcome to Splunk Education! Splunk training programs are designed to enable you to get started quickly and ...

Five Subtly Different Ways of Adding Manual Instrumentation in Java

You can find the code of this example on GitHub here. Please feel free to star the repository to keep in ...

New Splunk APM Enhancements Help Troubleshoot Your MySQL and NoSQL Databases Faster

Splunk Observability has two new enhancements to make it quicker and easier to troubleshoot slow or frequently ...