If you are on Madrid already, the ServiceNow store app will not install into it, as it is currently certified only up to London (as of today, new release 1.1.7 posted 6/27/19). That is a protection the ServiceNow Store provides - certified compatibility with each release and will block installation into non-certified releases. Since London < Madrid, installation from the store of this app to a Madrid release instance will fail immediately.
From https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/legal/servicenow-upgrade-policy.pdf :
"The current policy of ServiceNow is to support the most recent and the immediately previous release
families. Because ServiceNow generally makes release two new release families per year, you will need
to upgrade approximately once per year to stay on a supported release family."
Current release = Madrid, immediately previous release = London. London was released 9 months ago. New York will be released in about 3 months, which, by current policy, will make London unsupported. That gives this brand-new London-certified Splunk store app v1.1.7 a loosely-projected, fully-supported and guaranteed shelf life of about 3 months from today.
We share your sentiment, bbouch - we are currently gun shy about making this a critical piece of our environment. This slow pace of ServiceNow Store certification of this Splunk Integration app on new ServiceNow releases needs to pick up before we will again consider using it.
... View more