...
NOTE: Like other DataSync targets, ServiceNow fields that have display values will save with the sys_id as the field's value in Splunk. To also share the display values, turn on the DataSync display value property.
Prerequisites
...
You will first need to install the Perspectium Core update set. You can request a download link for this update set by contacting Perspectium Support.
You will also need to create a ServiceNow shared queue that points to your Splunk instance. This queue should have been created by Perspectium Support upon initial configuration of your ServiceNow instance.
Procedure
To create a bulk/dynamic share for your ServiceNow-to-Splunk integration, follow these steps:
...
| UI Steps |
|---|
|
| UI Step |
|---|
To create a bulk share, navigate to Perspectium > DataSync > Bulk Share or simply type Bulk Share in the Filter Navigator on the upper left-hand side of the screen. |
| UI Step |
|---|
Click the New button next to Bulk Shares. In the resulting form's Cipher dropdown, select Base64 Encode Only. Then, follow the remaining steps to create a ServiceNow bulk share for DataSync for ServiceNow. |
|
...
| UI Steps |
|---|
|
| UI Step |
|---|
To create a dynamic share, navigate to Perspectium > DataSync > Dynamic Share or simply type Dynamic Share in the Filter Navigator on the upper left-hand side of the screen. |
| UI Step |
|---|
Click the New button next to DataSync Configurations. In the resulting form's Cipher dropdown, select Base64 Encode Only. Then, follow the remaining steps to create a ServiceNow dynamic share for DataSync for ServiceNow. |
|
...