All Apps and Add-ons

Splunk App and Add-on for ServiceNow: How to get the correct names of the assignment_group and assigned_to for incidents?

skender27
Contributor

Hi,

I set up the app and add-on for ServiceNow (Fuji), but I still cannot get the right names for the assignment groups and assigned_to who opened, created or closed the incidents in the Incident Performance dashboard.
Instead, I get the sys_id of those groups and users (something like assignment_group=de3eada60f410200d764b97ce1050e6c)...
It should be something in the automatic lookup tables.

Has anyone had the same problem?

Thanks,
Skender K.

0 Karma
1 Solution

jcoates_splunk
Splunk Employee
Splunk Employee

HI, that needs a lookup. Go to Settings -> Searches, reports, and alerts. Set the app context to Splunk Add-on for Service Now, and enable the searches.

View solution in original post

jcoates_splunk
Splunk Employee
Splunk Employee

HI, that needs a lookup. Go to Settings -> Searches, reports, and alerts. Set the app context to Splunk Add-on for Service Now, and enable the searches.

skender27
Contributor

Hi Jcoates,

Thank you very much, indeed.
Now it works all fine. I had forgotten to activate those search to the SNow tables...

Well done,
Skender

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...