Splunk Cloud Platform

Unable to add Description in ServiceNow Incident Alert

yuvaraj_m91
Loves-to-Learn Lots

My Objective is to create an Alert in ServiceNow whenever an failure alert triggered in SPlunk.
I have installed Splunk Add on for ServiceNow and configured the connection setup. 
I was able to successfully post the incident is ServiceNow with the default fields available in ServiceNow Incident Alert.
However i need to update the Description field in ServiceNow with the details of Alert Name and Alert Result to identify why that alert triggered.

Labels (2)
0 Karma

KendallW
Contributor

Hi @yuvaraj_m91 You can reference the required fields in your Splunk alert config using $name$ for the alert name and $result.field$ for other fields

0 Karma

yuvaraj_m91
Loves-to-Learn Lots

I tried to update  $result.field$  in the Description of Custom fields as in the screenshot, but it is not updating in servicenowTEST.jpg

0 Karma
Get Updates on the Splunk Community!

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...

Stay Connected: Your Guide to February Tech Talks, Office Hours, and Webinars!

💌Keep the new year’s momentum going with our February lineup of Community Office Hours, Tech Talks, ...