I installed the Splunk Add-on for ServiceNow Splunk_TA_snow and followed these steps:
Set up the add-on using service_now.conf
Follow these steps to set up the add-on using service_now.conf.
Go to $SPLUNK_HOME/etc/apps/Splunk_TA_snow and make a new directory called /local.
Copy Splunk_TA_snow/default/service_now.conf to $SPLUNK_HOME/etc/apps/Splunk_TA_snow/local.
Configure the values according to the table, then save the local version of the file.
After restarting the Search Head, I am seeing this error in the ta_snow.log:
2015-06-09 08:25:17,618 INFO 139681163286272 - Start Snow TA
2015-06-09 08:25:17,658 ERROR 139681163286272 - Failed to get service_now.conf
2015-06-09 08:25:17,658 ERROR 139681163286272 - Failed to setup config for Snow TA: Failed to get service_now.conf
2015-06-09 08:25:17,658 ERROR 139681163286272 - Traceback (most recent call last):
File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow.py", line 84, in run
snow_conf = snow_config.SnowConfig()
File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 38, in __init__
default_configs = self._get_default_configs()
File "/apps/splunk/6.2.2/search-head/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 78, in _get_default_configs
raise Exception("Failed to get service_now.conf")
Exception: Failed to get service_now.conf
Its actually due to the permission settings in the ServiceNow. I am able to access ServiceNow once the permission is modified there.
Its actually due to the permission settings in the ServiceNow. I am able to access ServiceNow once the permission is modified there.
Were you able to resolve this issue. I am facing similar kind of problem. We use a proxy to connect to the Internet (ServiceNow).
that sounds like a systems level permission problem.