My Objective is to create an Alert in ServiceNow whenever an failure alert triggered in SPlunk.
I have installed Splunk Add on for ServiceNow and configured the connection setup.
I was able to successfully post the incident is ServiceNow with the default fields available in ServiceNow Incident Alert.
However i need to update the Description field in ServiceNow with the details of Alert Name and Alert Result to identify why that alert triggered.
Hi @yuvaraj_m91 You can reference the required fields in your Splunk alert config using $name$ for the alert name and $result.field$ for other fields
I tried to update $result.field$ in the Description of Custom fields as in the screenshot, but it is not updating in servicenow