Krypton


Perspectium DataSync for Splunk gives you the power to transfer data from your ServiceNow instance to Splunk's HTTP Event Collector using a token-based authentication model. DataSync for Splunk is a single-direction (ServiceNow to Splunk) integration that can leverage ServiceNow bulk or dynamic shares for the transfer of data to Splunk.


To set up a DataSync for Splunk integration, follow these steps:

Create a ServiceNow bulk/dynamic share for Splunk

Open your Splunk HTTP Event Collector port to the Perspectium Integration Mesh

Generate a Splunk Event Collector token

View your event collections in Splunk

Enable indexer acknowledgement (Optional)