troubleshooting em/inbound_event webhook

[StephenM]

We are trying to troubleshoot why some Azure Monitors create events but there are some that don't.  I suspect that its the json payload.  

How can I see the raw data as SN receives it before it gets parsed into an Event?

https://<Instance>.service-now.com/api/sn_em_connector/em/inbound_event?source=azuremonitor

[Tony Chatfield1]

Hi, if you are utilizing the ECC queue then you can see inbound and outbound payloads for the current day from the queue.

/ecc_queue_list.do?sysparm_query=sys_created_onONToday%40javascript%3Ags.daysAgoStart(0)%40javascript%3Ags.daysAgoEnd(0)&sysparm_view=

ecc_queue is a rotated table and records for the 6 days previous should be visible via the Table Rotation menu module.

[StephenM]

This looks like data coming and going from the MID servers. I don't think that this traffic goes through our MID servers.

[Tony Chatfield1]

Hi, if this is an inbound API message and not a response to a  message from the instance,
then I do not believe that the payloads are logged anywhere by default and think that you will need to enable some debugging.

These links may help

https://developer.servicenow.com/blog.do?p=/tags/rest-debugging/

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0546297

A search of the forum may also produce more details from similar posts.

[Ravi9]

as far i am aware , during transformation of events sn does put them in sys log temporarily , you can easily tweak the code and get what you needed though , have a look at below rest reosource

https://INSTANCE_NAME.service-now.com/sys_ws_operation.do?sys_id=ad9f005f1b02bc504c2e5422604bcb5a