I am looking for this from Splunk team too. Their integration with External Network Management systems is very weak. They should provide better alert actions. Simple/Basic one is, it should be able to send an SNMP trap out . ... View more

I am interested in this too 🙂  . Any plans to support Python 3 which is required for newer Splunk verisions ... View more

Looks like that seems to be the problem. That fixed it for me. ... View more

appended the cert information to cacert.pem in python lib to make it work. ... View more

whats the solution for this problem? ... View more

Whats the fix for this? ... View more

What was the solution for this? ... View more

Problem resolved . For some reason it didn't create that checkpoint file when all others were created and it fell in that black hole. Disabling and enabling of the incident data type made it work. Thanks for the guidance. ... View more

You are on the right track. I see these errors in log. I am thinking its related to that. I don't see a checkpoint for that incident table created. I see for other ServiceNow tables though. 2/16/17 8:23:01.310 PM 2017-02-16 20:23:01,310 ERROR pid=18563 tid=Thread-17 file=thread_pool.py:_run:259 | Traceback (most recent call last): File "/app/splunk/etc/apps/Splunk_TA_snow/bin/framework/thread_pool.py", line 257, in _run func() File "/app/splunk/etc/apps/Splunk_TA_snow/bin/snow_job_factory.py", line 38, in __call__ sc.DEFAULT_RECORD_LIMIT)) File "/app/splunk/etc/apps/Splunk_TA_snow/bin/snow_data_loader.py", line 142, in collect_data self._write_checkpoint(table, timefield, jobjs, refreshed) File "/app/splunk/etc/apps/Splunk_TA_snow/bin/snow_data_loader.py", line 278, in _write_checkpoint if obj[timefield] == latest_timestamp] KeyError: u'sys_updated_on' ... View more