help to connect splunk with servicenow

[jip31]

hi

I try to list the step to interface splunk with service now and to create an incident in servicenow from a splunk alert

is it mandatory to use the splunk addon Splunk Add-on for ServiceNow | Splunkbase?

and what are the steps after?

thanks

[marnall · Accepted solution]

It is not mandatory to use that app, but unless you want to build the configurations yourself, you might as well use a pre-made app. The app has documentation describing how to install and use it: https://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Usecustomalertactions