All Apps and Add-ons

unable to configure servicenow addon

martinnepolean
Explorer

Hi,

We are trying to integrate snow with Splunk using latest version of Splunk Add-on for ServiceNow . While configuring the snow url and credentials we are getting below error. We are using local snow username and it is SSO configured and version is "newyork". I am able to connect to the url from splunk server using /bin/splunk cmd openssl s_client -connect xxx.service-now.com:443.

Unable to reach server at https://xxx.service-now.com. Check configurations and network settings

0 Karma

lijuj
Explorer

alt text

0 Karma

martinnepolean
Explorer

I am using Splunk Add-on for ServiceNow and below is the error in the log file

SSLHandshakeError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:741)

0 Karma

lijuj
Explorer

alt text

0 Karma

martinnepolean
Explorer

thanks @lijuj for response, I am using Splunk Add-on for ServiceNow and not the one in the screenshot. Please provide your suggestions for fix

0 Karma

lijuj
Explorer

alt text

0 Karma

lijuj
Explorer

Set up or change the instance where incidents or events are created

To set up or change the ServiceNow instance where new security incidents and security events are created, use the Setup action in the application list.

Open Splunk.
Click either the Apps gear icon, or the Manage Apps shortcut menu item.
In the list of applications, click the Set up action for the ServiceNow Security Operations Integration.
Provide the ServiceNow URL, username, and password.
The username and password are for the "integration user" (not sso) created in ServiceNow.

Click Save.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...