Looking for some assistance with an error that I am receiving when I try and configure the Splunk add-on for ServiceNow from Splunk base.
When setting up the "ServiceNow account" information - Add ServiceNow Account in the Splunk Web interface, I receive the following error.
ERROR: Unable to reach server at https://InstanceName.service-now.com. Check configurations and network settings.
Account has been created in ServiceNow with the following roles
import_transformer, rest_api_explorer, sn_sec_splunk_v2.api_account_access, sn_si.analyst, sn_si.integration_user, soap
URL has been verified as the "Base URL" to the instance
User name and password have been verified by the ServiceNow team. Password has been reset and retested as well to ensure accuracy
check this link with information about how you can setup the proxy and edit the configuration from CLI.
you have to edit the service_now.conf at $SPLUNK_HOME/etc/apps/Splunk_TA_snow/local. If the file is not under local folder, you can copy the service_now.conf from default to local and run the proper configuration