Hi Splunk Community I am using the Splunk Add-on for ServiceNow v8.0.0 in a Splunk Cloud environment and have correctly configured a custom input for the change_request table with: timefield = sys_updated_on filter_parameters = sysparm_query=ORDERBYDESCsys_updated_on&sysparm_limit=100 Despite this, logs in _internal consistently show the add-on attempting to use: change_request.change_request.sys_updated_on Example from splunkd_access.log: 200 GET /change_request.change_request.sys_updated_on This causes data not to be ingested, despite 200 HTTP responses. The correct behavior should use change_request as the table and include sys_updated_on in the query string, not the URL path. Request: Please confirm if its a know issue and if there is a workaround for this? Thank you. Thank you.
... View more