All Apps and Add-ons

question regarding aggregation with Splunk/Servicenow

multiverse
Engager

Hi Ron,

I am a neophyte to both Splunk and Servicenow. I have installed your app, and ran a few examples. Works great, nice job. It has fallen to me to integrate the two, and so far so good. But I am stuck on understanding how to leverage your app in regards to aggregate. There is is precious little knowledge, and I assume this is something I should know, but don't. Could you offer a novice explanation with a couple of novice examples please?

Thanks!

0 Karma

Ron_Naken
Splunk Employee
Splunk Employee

There doesn't appear to be much information on how to use aggregate functions for ServiceNow, after glancing through the ServiceNow wiki. There are examples of how to use some of the aggregate functions (i.e. SUM, AVG, COUNT, MIN, MAX) with "having" and "group by" clauses. Here's a link to the wiki that describes aggregates and provides examples:

http://wiki.servicenow.com/index.php?title=Direct_Web_Service_API_Functions

The in-app help for the ServiceNow app provides an example of how to use aggregates within Splunk. Note that you will also need to activate the Aggregate Web Services Plug-In in your ServiceNow portal:

http://wiki.servicenow.com/index.php?title=Activating_ServiceNow_Plugins
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...