How can I setup ServiceNow to allow us to pull data into Splunk?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-25-2023 07:25 PM
How can I setup ServiceNow to allow us to pull data into Splunk?
We are NOT looking to do the push integration with the ServiceNow Event Table. AKA create tickets from splunk. We only want to pull information in, particularity the CMDB.
How can we accomplish this? Is this an easy setup?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-25-2023 07:44 PM - edited 04-25-2023 07:50 PM
Most of the setup for pulling info from ServiceNow is there already. All the tables have an API already created and ready to use. You can use SOAP, REST, XML, and RSS Feed.
The other parts is deciding the authentication/authorization you want to use. You can use Basic auth straight away.
Or you can setup an OAuth 2.0 authentication.
https://developer.servicenow.com/dev.do#!/reference/api/tokyo/rest/
Whether it's easy or not to pull now depends on what Splunk can do. Can Splunk be set up to consume a web service.
Edit: I forgot to add the page for setting up Oauth 2.0:
You can also create your own API with Scripted REST API or Scripted SOAP
The scripted SOAP/REST will obviously be a little more complex but it gives you more control if you need it to do something specific.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-26-2023 07:35 AM
@ChrisBurks,
Thank you for providing the information above. I will follow the information provided, start with the setup, and let you know how it goes.
Regards.
