Splunk IT Service Intelligence and third party ticketing (Service Now): Is there a way to fire a script when an ITSI Service goes red?

[r34220]

Is there a way to fire a script when A ITSI Service goes red?

[thejeffreystone]

As of right now I think it would have to be via a script or email. You can build a multi-kpi alert, then under the correlation search, set it to fire off an email or script. You might be able to point one of those to service now to achieve what you are trying to do.