Splunk HTTP Event Collector can be used to aggregate and analyze events from your ServiceNow instance by sending application events over the http protocol using a token-based authentication model. The Splunk Perspectium integration is a single-direction (ServiceNow to Splunk) integration that can leverage either bulk or dynamic shares for the collection of ServiceNow events in a Splunk instance. Both the Splunk Enterprise and Splunk Cloud platforms can be configured for this Perspectium integration. Learn more about Splunk HTTP Event Collector.
Create a ServiceNow bulk/dynamic share for Splunk
Take the first step in syncing your ServiceNow events with Splunk's HTTP Event Collector by creating a ServiceNow dynamic share or bulk share.