Multiple incident creation on servicenow through splunk

[yashaswinig2210]

Hi All, @renjith_nair

I'm working on a requirement to create a Splunk Alert which triggers/Creates the Incident in Service Now portal.
I want the alert to create multiple incidents for each result.
My Findings : The alert creates Single Incident with multiple events for each result in ServiceNow.
Requirement : Alert should be able to create Incident for each result in ServiceNow.

How can this be achieved?

[rajashekar_s]

After creating the correlation search and alert action to be service now incident,

goto setting-> search,reports and alerts, find you search. Click on it, scroll down and change the trigger to each result from once and it should create one incident per row of your result