Splunk ITSI

Is there a way in ITSI to open incident on ServiceNow without ServiceNow integration ?

philon
Observer

I want to know if it is possible to open an incident in ServiceNow from notable event console without having ServiceNow integrated with Splunk.

I mean we can install Splunk addon for ServiceNow but we can't install addon for Splunk on ServiceNow side (the project team in charge of ServiceNow refuse to install the app on ServiceNow). We can only use Splunk addon fo ServiceNow and ServiceNow APIs.

Labels (2)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @philon,

you can create a shall script that invokes the ServiceNow API to launch from Splunk alert.

I'm not an expert in scripting, but I used this approach many times with other systems.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Industry Solutions for Supply Chain and OT, Amazon Use Cases, Plus More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...