All Apps and Add-ons

Issues with Splunk Add-on for ServiceNow configuration

blinkage
New Member

During GUI-setup it will not connect to http:// (have also tried with FQDN.
The snow-main.log says "certificate validation error", but as there is no S in the http, no certificate validation should be required.
Anyone have any experience with this?

Thanks for your time.

0 Karma

splunk4now
Explorer

Are you indicating that the SNOW endpoint is not secure and it is on-premise dev server without any secure certificate ? Did you try configuring it in the conf file as per documentation below ?
http://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Setuptheadd-on

Even if this leads to the same problem then some work around might have to be done in order to accept configuration for http. The python code that is available in the add-on does seem generic but have not had a chance to see what configurations can be passed to override it

0 Karma

blinkage
New Member

we have done some more troubleshooting and installed a certificate, and still cant get it to work.

what we are left with is a new user with the same name and password as we created on the servicenow instance. Because i saw some authentication errors to 127.0.0.1/somepath to snow/

when we added a user in splunk with the same credentials as in servicenow these errors disappeared.
I can access the urls via curl and the xml lists fine.

we are now left with these errors:

ERROR pid=13056 tid=MainThread file=configure.py:reload_confs:288 | Failed to refresh https://127.0.0.1:8089/servicesNS/-/-/configs/conf-service_now/_reload, reason=
ERROR pid=13056 tid=MainThread file=rest.py:splunkd_request:49 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_snow/configs/conf-service_now, errcode=unknown, reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/framework/rest.py", line 47, in splunkd_request
headers=headers, body=data)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/init.py", line 1593, in request
(response, content) = self.request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1335, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1257, in _conn_request
conn.connect()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init_.py", line 1060, in connect
raise socket.error, msg
error: [Errno 111] Connection refused

ERROR pid=13056 tid=MainThread file=rest.py:splunkd_request:49 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_snow/configs/conf-service_now, errcode=unknown, reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/framework/rest.py", line 47, in splunkd_request
headers=headers, body=data)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/init.py", line 1593, in request
(response, content) = self.request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1335, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1257, in _conn_request
conn.connect()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init_.py", line 1060, in connect
raise socket.error, msg
error: [Errno 111] Connection refused

2017-08-18 14:22:04,891 ERROR pid=13056 tid=MainThread file=rest.py:splunkd_request:49 | Failed to send rest request=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_snow/configs/conf-service_now, errcode=unknown, reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/framework/rest.py", line 47, in splunkd_request
headers=headers, body=data)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/init.py", line 1593, in request
(response, content) = self.request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1335, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init.py", line 1257, in _conn_request
conn.connect()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/
init_.py", line 1060, in connect
raise socket.error, msg
error: [Errno 111] Connection refused

Webgui reports:
Failed to update /servicesNS/nobody/Splunk_TA_snow/service_now_setup/snow_proxy/snow_proxy

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...