All Apps and Add-ons

Splunk Add-on for ServiceNow vs Splunk Add-on for ServiceNow

kalaicompforens
Engager

What are the differences between Splunk Add-on for ServiceNow and Splunk App for ServiceNow ?

Thank you.

niketn
Legend

@kalaicompforensic, you might have to understand differences between Add On and Apps.

Splunk follows Common Information Model (CIM) for normalization of data for ease in correlation and reusability of data across various systems/apps. Documentation on CIM: http://docs.splunk.com/Documentation/CIM/latest/User/Overview

Splunk Add On ensures data ingested to Splunk is normalized and also a lot of other other performance, re-usability and correlation related features like Data Models, Saved Searches, Pre-built Panels etc to be used across specific and/or several Apps (when built upon CIM).

Splunk Apps are more User/Developer facing interface built upon such Add On which caters to specific Business needs/use case. Add On is not always necessary for Apps to function but CIM compliant Add On ensure faster/better App development and re-usability. Read about App and Add-On https://docs.splunk.com/Documentation/Splunk/latest/Admin/Whatsanapp.

In case of Splunk Add-on for ServiceNow and Splunk App for ServiceNow as the documentation for Add-on mentions, the same Add-on for ServiceNow will ensure that Knowledge Objects created can be reused across Splunk's premium apps as well like Splunk App for Enterprise Security (besides the Splunk App for ServiceNow). Details on using Add-on and App for ServiceNow including the installation is documented on Splunk Docs. http://docs.splunk.com/Documentation/AddOns/released/ServiceNow/About and http://docs.splunk.com/Documentation/ServiceNow respectively.

Since these are Splunk Built and Certified. You can get assistance for issues with these from Splunk using your Splunk Entitlement. Obviously, the Splunk Answers Community can also assist with any hiccups you face while using these or any other issues with Splunk. Hope this helps!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

gjanders
SplunkTrust
SplunkTrust

Perhaps you could convert your comment to an answer?
It looks like a well written answer...

niketn
Legend

@garethatiag, thanks I did. I was waiting for others to pitch in if they felt something else needed to be added or other way of explaining the difference.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

gjanders
SplunkTrust
SplunkTrust

Thanks, we can always have multiple answers to the same topic but I have generally noticed that once there is 1 valid answer it's much less likely that someone will feel the need to post another answer...(unless they want to clarify the answer or similar).

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...