servicenow incidents in splunk

[surekhasplunk]

AM not able to see all the incidents which are there in my servicenow instance.
I have splunk_TA_Snow app configured in my splunk.
and am getting below error in splnk_ta_snow_main log file.

2016-10-16 15:49:34,318 INFO pid=9600 tid=Thread-2 file=snow_data_loader.py:do_collect:153 | start https://accenturenordicspov.service-now.com/api/now/table/incident?sysparm_display_value=all&sysparm...
2016-10-16 15:49:35,229 INFO pid=9600 tid=Thread-2 file=snow_data_loader.py:_do_collect:170 | end https://accenturenordicspov.service-now.com/api/now/table/incident?sysparm_display_value=all&sysparm...
2016-10-16 15:49:35,234 INFO pid=9600 tid=Thread-2 file=snow_data_loader.py:collect_data:143 | Get 0 records from https://accenturenordicspov.service-now.com/incident
2016-10-16 15:49:35,236 INFO pid=9600 tid=Thread-2 file=snow_job_factory.py:call_:50 | End collecting from incident.

[ThomasLeroy]

Hello surekhasplunk,

There are no errors in your log file.

The TA_snow just can't find any new records created after sys_updated_on>=2016-10-07.

Check your input.conf, you can add this option :

since_when = your_date

The TA_snow will start collecting from your_date until today.
Next by default he will check every two minutes if they are updates on your table.

Hope this help