To enable your Splunk HTTP Event Collector to listen for data that is being shared from your ServiceNow instance, you will need to open your HTTP Event Collector port to the Perspectium Integration Mesh.
First, you will need to create a ServiceNow bulk/dynamic share for Splunk.
To determine your Splunk HTTP Event Collector port to the Perspectium Integration Mesh, follow these steps:
Log into Splunk and navigate to Settings > Data inputs from the top left-hand side navigation menu.
Click HTTP Event Collector under Type.
On the right-hand side of the screen, click Global Settings.
In the HTTP Port Number, note the port that the Splunk HTTP Event Collector is running on. Have your system administrator verify this port is open and accessible by the Perspectium Integration Mesh.
NOTE: The default port that is set when initially configuring your Splunk HTTP Event Collector is 8088.
For more information on configuring your HTTP Port Number in Splunk, see enable HTTP Event Collector.