This issue occurs only with certain apps, such as Search and Reporting, ITSI, and a few other applications. but works seamlessly on certain apps. The screenshots here are taken from the Search & Reporting app. works with _internal index doesn't work with other indexes. In order for it to work, I need to extend the preset time beyond the earliest time passed inside the search. I have not seen this behavior earlier.
... View more
Unfortunately, it's the same with other indexes as well, including _* indexes. We tried with another user ID, and the issue is still the same.
... View more
Hello Splunkers, The hardcoded time parameters inside a simple search don't work with v9.4.3. It only takes the input from the time presets. Do you also experience a similar issue? index=index earliest="-7d@d" latest="-1m@m" and my preset is last 15 mins, then I get this output. earliestTime latestTime 07/25/2025 10:40:01.636 07/25/2025 10:52:59.564 Very strange. Nothing mentioned on this in the release notes.
... View more
Currently, we are using the ITSI Module along with the Splunk_TA_snow addon to create incidents on ServiceNow and this is working as expected. We have a new requirement now to create TASKs along with the incidents. We went through the scripts of ServiceNow and the documentation and we couldn't find anything that could help us. My questions are 1. do we have this feature within the current scope of the addon? 2. If not, can this be customized?
... View more