I have bunch of alerts, I received email alert, but I did not receive auto cut incident to service now
How to troubleshoot this issue?????
Hi @vishwa ...
Around when ServiceNow and Splunk integration was done? recent or long back?
the servicenow tickets auto cut(incident creation) was working fine previously
did you do any upgrades recently?(on SH, indexers, the apps, etc)
Around when ServiceNow and Splunk integration was done? recent or long back?
Long back
the servicenow tickets auto cut(incident creation) was working fine previously
Yes it was working fine
did you do any upgrades recently?(on SH, indexers, the apps, etc)
No recent upgraded
are you not receiving Snow incident tickets only for a particular set of alerts
or
are you not receiving Snow incident tickets for whole splunk altogether?
I just tried for 4 to 5 alerts it not trigger yesterday
But again I tried today I am getting auto cuts now
Not sure what happened
the apps/addons sometimes makes our lives difficult by doing like this.
please check the internal logs for that servicenow app/addon... it may give you some hints, if you find the issue.. you can update this post, so in future other users can use your learnings.
karma / upvotes are appreciated by all. thanks.
There was some maintenance activity was there