@isoutamo We are using splunk cloud and this add-on is installed on Splunk IDM. Usually we don't have privileges to update the add-on, we usually place a support ticket to update our apps and add-ons on IDM and SH. I still doubt am i using the right option of Splunk add-on for Servicenow(Servicenow Incident Integration) for sending the data from Splunk to servicenow because majority of the users are using this add-on in getting the data into splunk from snow. ... View more

Yes, both are running on the updated versions  and in order to set up an account in Splunk, a service account was set up in servicenow and all necessary privileges has been granted to that account. So we configured this add-on using the account provided by servicenow. We were able to successfully ingest data from servicenow to splunk but the problem we are facing is sending the data from splunk to servicenow ... View more

Thanks @isoutamo for your response,Yes we have installed the splunk add-on for servicenow, We have a report that we would like to post to a CMDB table in snow. Under report -->Trigger-->we selected Servicenow Incident integration and passed the account and api end point details, but the data is not posting to the CMDB table, instead it is hitting to the temp table and all the fields which we pass are blank in that temp table and seeing a error message on the last column of that temp table. Any advise or suggestions would be helful. ... View more

@richgalloway Do you have any idea on this request? I got stuck with this and trying to figure out an option to send this data from splunk ... View more

@prince Can you give some more details regarding the app, Is it from splunkbase or custom developed app?     ... View more

@vikesh05 Only way is to open a case to splunk support ... View more

@joydeepm Try using the below url   https://http-inputs-prd-p-xwh8d.splunkcloud.com:8088/services/collector/event You can also give it a shot using port 443 ... View more

@sharrah If you don’t find a server controls option, you would need to open a case to splunk support to perform a restart ... View more

@santosh121 You can open a ticket to splunk support to enable REST access on your splunk cloud stack so that you can perform REST based search and export it to a csv I had the same issue and sorted it out  ... View more

@hfjechen You have 2 options here.   1. Request splunk support to enable REST access on your splunk cloud stack to perform REST based searches. 2. Since splunk cloud doesn’t provide a shell access, you can open a ticket to splunk support and ask them to provide the app package. ... View more

@Srilekha In order to access REST based API’s or if you want to execute any REST based searches on splunk cloud, you need to open a case to splunk support to enable REST access on your splunk cloud stack. ... View more

Hello @raynold_peterso  When i am trying to configure the app, i am seeing the index isilon doesn't exist error where i have already created the isilon index, i tried it on our HF and SH but seeing the same error. Any thoughts on this? ... View more

@kamlesh_vaghela We need to send this data on a 24 hr interval and since we have millions of records, how we can achieve this if we want to apply delta for the records incase if we go with webhook option? ... View more

Thanks @kamlesh_vaghela , I will try the webhook option and see if it works.     ... View more

Hi @kamlesh_vaghela  i got the endpoint url with a service account details to send the data from splunk to snow, can you please help me with a sample script?   Thanks ... View more

Thanks @kamlesh_vaghela,  I found the below cmdb data ingestion API, hope this will work out. https://developer.servicenow.com/dev.do#!/reference/api/orlando/rest/cmdb-ingest-api     Thanks ... View more

Hi @kamlesh_vaghela do you have any idea on this by chance? ... View more

Does this product works even after the trial after we set up the initial configuration? ... View more

I have installed it on the Heavy forwarder along with jTDS drivers and created inputs and connections using a sql service account, In my case it worked only with jTDS driver. ... View more

Thanks much @kamlesh_vaghela. ... View more

Hi Kamlesh, These logs are coming from Mulesoft cloudhub runtime manager via HEC to Splunk cloud. User is sending multiple json logs where only for a particular type of log, it is coming in nested json format where when i execute the search across that source, SH is freezing for a while and i have put the truncate limit to 450000 initially.Now the user is requesting to break this huge set of log into smaller chunks by breaking this event at the key value Source_System i added a line breaker for this as mentioned above in props file but i had no luck in parsing this event. ... View more

Did anyone came across this kind of issue? please help me out. ... View more