Splunk Add On Integration with ServiceNow

[ChenelleS]

Greetings Community,

We are implementing the Splunk Add on with ServiceNow here at our company.  Splunk Cloud to ServiceNow Cloud.  Read only api... Splunk will be pulling information from ServiceNow to view incident, changes and requests, etc to read.  It wont be a bidirectional integration until later on.  We are using Ping ID for our SSO. But we were told we must use OAuth Authentication due to our security company policy. We created a local service account , added the roles  directly to Local account per the splunk / servicenow instructions and we created a non human account in OUD for the Service account.   We had an issue with the Local account getting to the Ping SSO.  We unchecked the webservice only which was blocking.   We had the Splunk representative try to log on again and we were log in directly to the default UI page.  We never got to the page where it asked: " Splunk integration would like to connect to your servicenow account on instance XXXXXX." 

 However, after much trial and error and research, our Solution Architect was able to find that there was a plugin called com.snc.customurl that he activated and then he also created a property to go with the plugin where 

oauth_auth_check = true  and he made the new property he created =true that he notice was not activated in the dev3 instance we were developing this in.

Before we move forward with this integration, we want to make sure that this new plugin activation and or property will not cause a global impact or issue with anything.  He wanted to know also did he just need to create a property for that prompt to connect or if he only needed to activate the plugin or both were needed.  Did he fix the issue or was there another way to get the splunk integration prompt through the OAuth authentication and SSO that we missed.   Please advise and see docs links used.  Let me know if you need more information.  Thank you kindly!

https://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Setuptheadd-on 

https://docs.splunk.com/Documentation/AddOns/released/ServiceNow/ConfigureServiceNowtointegratewithS... 

Troubleshoot add-ons - Splunk Documentation

OAuth 2.0 (servicenow.com)

Regards,

Chenelle 

[j3m4a5]

Hi Chenelle,

Got a similar issue, where did you get too in your instance?

Jensen