Issue with Splunk Add-on for ServiceNow (v 2.9.1) field extraction in Splunk version 6.5.2

[splunk4now]

Maybe the usage of '=' & '/' character in the field values (ServiceNow data which is not under control) is probably causing the problems in extracting the field values correctly?

What's the level of control available in the add-on to configure regular expression as per needs and where should the reg-ex configuration be done (props.conf or transforms.conf in the add-on default folder ?) ?

Also what's the current regex used for extraction by the add-on and where can it be found ? This will also throw some insights into why it is failing

[splunk4now]

Seems strange. Initially data in search results were good (correctly mapped as values to fields) and it got jumbled when timeline was increased/other tables were enabled. I tried cleaning the index and tried pulling data again, but it did not resolve the issue either.

As a last ditch effort, did a complete re-installation and a now the data seen in search results is proper. But if there are insights into regex used, please do share. Service now data is key value pairs for the API used, but it would still be good to check this regex and fine tune it