Date: Fri, 29 Mar 2024 08:24:08 +0000 (UTC) Message-ID: <393719616.273.1711700648924@ip-10-0-0-180.us-west-2.compute.internal> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_272_246536086.1711700648919" ------=_Part_272_246536086.1711700648919 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
After setting up your bulk or dynamic share within your SeviceNow sharin= g instance, ServiceNow data will be collected into Splunk's HTTP Event Coll= ector. Event Collections can be filtered by source type if multiple data so= urces were configured when generating your Splunk Event Collector token.=
You will f= irst need to create a = ServiceNow bulk/dynamic share for Splunk.
You will a= lso need to point your Splunk HTTP Event C= ollector port to the Perspectium Integration Mesh and generate a Sp= lunk Event Collector token.
Procedure
To view your event collections in Splunk, follow these steps:
After executing your bulk share for Splunk or creating your dynamic shar= e for Splunk and creating/updating/deleting records, log into your Sp= lunk instance and click the Splunk logo to navigate to your instance's home= page.
From the left side navigation menu, click Search and Reporting= strong>.
On the resulting page, click the Data Summary button under What to Search. Then, click = your Spunk instance name under Host.
Your event collection data will appear on the resulting page.
If no data appears or if you want to view data for a specific time/date = range, click the Last 24 hours dropdown at the top right-h= and corner of the form to change the time range for which your event collec= tion data will be displayed.