Splunk Dev

ServiceNow Splunk Integration to Modify Incidents

michaelsplunk1
Path Finder

Hi everyone!

I'm trying to have Splunk modify incidents in ServiceNow. For example, when an alert is triggered in Splunk based on ServiceNow data, I would like Splunk to take the oldest ServiceNow incident event that triggered the alert, and have Splunk go into ServiceNow to escalate that incident's priority and also make other related incidents in the alert's results the children of that oldest incident in ServiceNow. Does Splunk have this power?

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...