All Apps and Add-ons

question regarding aggregation with Splunk/Servicenow


Hi Ron,

I am a neophyte to both Splunk and Servicenow. I have installed your app, and ran a few examples. Works great, nice job. It has fallen to me to integrate the two, and so far so good. But I am stuck on understanding how to leverage your app in regards to aggregate. There is is precious little knowledge, and I assume this is something I should know, but don't. Could you offer a novice explanation with a couple of novice examples please?


0 Karma

Splunk Employee
Splunk Employee

There doesn't appear to be much information on how to use aggregate functions for ServiceNow, after glancing through the ServiceNow wiki. There are examples of how to use some of the aggregate functions (i.e. SUM, AVG, COUNT, MIN, MAX) with "having" and "group by" clauses. Here's a link to the wiki that describes aggregates and provides examples:

The in-app help for the ServiceNow app provides an example of how to use aggregates within Splunk. Note that you will also need to activate the Aggregate Web Services Plug-In in your ServiceNow portal:
0 Karma
Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...