Hi Team,
We are using splunk addon for service now to get cmdb table data from snow and We are seeing duplicate entries for the same sys_id seems whenever the CI record is updated it created new event for splunk. Please let me know how to correlate these events. we are trying to save the license and storage and don't like to update the same data again.