- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Integration with service now
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Have you seen the app: http://apps.splunk.com/app/1228 ? I am sorta in the same boat looking for how our new implementation of Service Now will be best consumed by Splunk. If you need it and when I find more, I would be more than happy to share
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yep, it can be integrated. it's mostly used for events/incidents. look at the docs here: Configure ServiceNow to integrate with the Splunk platform - Splunk Documentation for further details (+ there are also video tutorials). I've used it, worked perfectly. in case you seek additional help (an external one) - there are plenty of tools available on the market to connect the systems. tools like trayio and zigiosp can help you, too. I've used them both. but I'm current using the latter for such instances.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to get the garbage values to display the actual values for fields assigned_to assignment_user_username?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@a2ay Actually those "garbage" values are the system numbers that correspond to the users of the system. I thought this was true but verified it by looking at index=snow |table assigned_to assignment_user_username
Let me know if you agree.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yeap integration done..the only thing that issue have with receiving fields...for example in these fileds in splunk app "opened_by, assigned_to, resolved_by" getting garbade value like 864b0ae40fc12500ce8a5bd69asas.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@bwindham, We've posted a new app that is quite easy to use. The setup is accomplished via the GUI (or manually edit the conf files if you prefer). You can find it here:
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
can you let me know how it need to be configured to get all the required tables of snow in Splnukapp?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you get Splunk to integrate with your Service Now instance? I am at that point now. I have added the app, created a user in SN and given SOAP roles, added the user login/password in passwd.conf and tried manually. Command I am running is "snow instance=
But I continue to get no results.
Any help would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Unfortunately, we are still in UAT testing so there is no implementation yet. When we do, which should be w/in a week or two, I will post on our experience
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I doubt 3 yr later this is still an issue but seriously, that is how long it took us to finally integrate they systems.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Have you seen the app: http://apps.splunk.com/app/1228 ? I am sorta in the same boat looking for how our new implementation of Service Now will be best consumed by Splunk. If you need it and when I find more, I would be more than happy to share
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
