Hi @PrewinThomas  Here are results: - 2025-08-06 04:57:46,803 log_level=ERROR pid=1 tid=MainThread file=snow_ticket.py:_do_handle:140 | [invocation_id=d888b8ade8c88888ab888c88a888b2d9] Failed to create 1 tickets out of 1 events for account: 2025-08-06 04:57:46,796 log_level=ERROR pid=1 tid=Thread-1 file=snow_ticket.py:_get_resp_record:617 | [invocation_id=d888b8ade8c88888ab888c88a888b2d9] Failed to decode JSON: Expecting value: line 1 column 1 (char 0) 2025-08-06 04:57:46,418 log_level=DEBUG pid=1 tid=MainThread file=snow_incident_base.py:_prepare_data:78 | event_data={'category': 'Infra/Service', 'short_description': 'Application Access PROD error', 'contact_type': 'IT Ticket', 'splunk_url': '', 'urgency': '4', 'subcategory': 'Monitoring', 'state': 'New', 'comments': '', 'location': 'US', 'impact': '4', 'correlation_id': '38bb688f-1d88-47de-a88a-6cb6cbc45e99', 'priority': '4', 'assignment_group': 'Support US', 'description': 'Application Access PROD error, please check', 'u_caller_id': 'xxxxxxxxxxxxxxxxxxxx', 'u_inc_issue_type': 'incident', 'configuration_item': 'Splunk PROD'} 2025-08-06 04:57:46,418 log_level=DEBUG pid=1 tid=Thread-1 file=snow_ticket.py:process_event:255 | [invocation_id=xxxxxxxxxxxxxxxxxxxxxxxxxx] Sending request to https://servicenow.com/api/now/import/x_splu2_splunk_ser_u_splunk_incident: {"category": "Infra/Service", "short_description": "Application Access PROD error", "contact_type": "IT Ticket", "splunk_url": "", "urgency": "4", "subcategory": "Monitoring", "state": "New", "comments": "", "location": "US", "impact": "4", "correlation_id": "38bb688f-1d88-47de-a88a-6cb6cbc45e99", "priority": "4", "assignment_group": "Support US", "description": "Application Access PROD error, please check", "u_caller_id": "xxxxxxxxxxxxxxxxxxxx", "u_inc_issue_type": "incident", "configuration_item": "Splunk PROD"}   ... View more

Hi @PrewinThomas  Servicenow Add-on already upgraded to v9.1.0 on 1st Aug but issue still persist.  I’ve changed the logging level to debug mode and will provide an update later. ... View more

Hi @livehybrid  These errors appear in UI.  I found the following error in "index=_internal eventtype=snow_ta_log_error":-  2025-08-06 02:03:05,305 log_level=ERROR pid=1 tid=MainThread file=snow_ticket.py:_do_handle:140 | [invocation_id=O1c41b4234274435a4a54df9386ht4b8] Failed to create 1 tickets out of 1 events for account: 2025-08-06 02:03:05,300 log_level=ERROR pid=1 tid=Thread-1 file=snow_ticket.py:_get_resp_record:617 | [invocation_id=O1c41b4234274435a4a54df9386ht4b8] Failed to decode JSON: Expecting value: line 1 column 1 (char 0) ... View more

Samples: - Include : * Process > 0%    Exclude : * Process = 0%  ... View more

I would like to have something like this:- PS > Get-Counter '\Process(*)\% Processor Time' -ErrorAction SilentlyContinue | Select-Object -ExpandProperty CounterSamples | Sort-Object -Property cookedvalue -Descending | Where-Object CookedValue -gt 0   *** There are thousand of 0% process which wasted a lot of space and custom metrics license.  ... View more

Hi,   I managed to found the issue for unknow state(3), need to add "" for "Program Files":-    receivers: smartagent/nagios: type: nagios command: C:\\"Program Files"\\NSClient++\\check_nrpe.exe -H 127.0.0.1 -c check_cpu" ... View more

Topic related to Splunk Observability and OTEL configuration.  ... View more

Thanks. It is working and I managed to bring up OTEL. Unfortunately it return 3 = unknow state.    receivers: smartagent/nagios: type: nagios command: "LC_ALL=\"en_US.utf8\" C:\\Program Files\\NSClient++\\check_nrpe.exe -H 127.0.0.1 -c check_cpu"   cmd : C:\Program Files\NSClient++>check_nrpe.exe -H 127.0.0.1 -c check_cpu OK: CPU load is ok.|'total 5m'=7%;80;90 'total 1m'=8%;80;90 'total 5s'=5%;80;90 ... View more