We are currently ingesting ServiceNow Logs through the Splunk Add-on for Service Now TA. However, the logs aren't being parsed properly, as they are in a raw log format, which makes it increasingly difficult to build any kind of dashboard etc.
Does anyone have any knowledge or experience in changing ServiceNow logs from a raw format to a structured format?
Any help would be greatly appreciated