Re: Integration to ServiceNow - Splunk Community

Splunk Enterprise Security

Installed the splunk add on to push events into ServiceNow and getting this error

"snsecingestes Unable to forward notable event"

Where could I start troubleshooting this issue?

As (almost) always, start with splunkd.log.

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Deprecation of Splunk Observability Kubernetes “Classic Navigator” UI starting ...

Access to Splunk Observability Kubernetes “Classic Navigator” UI will no longer be available starting January ...

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...