Perspectium DataSync for Splunk gives you the power to transfer data from your ServiceNow instance to Splunk's HTTP Event Collector using a token-based authentication model. DataSync for Splunk is a single-direction (ServiceNow to Splunk) integration that can leverage ServiceNow bulk or dynamic shares for the transfer of data to Splunk.