Splunk® Supported Add-ons

Splunk Add-on for ServiceNow

Download manual as PDF

Download topic as PDF

Splunk Add-on for ServiceNow

Version 4.0.0
Vendor products ServiceNow Kingston, London, and Madrid
Add-on has a web UI Yes. This add-on contains views for configuration.

The Splunk Add-on for ServiceNow allows a Splunk software administrator to use ServiceNow REST APIs to collect the following types of data:

  • Incident data
  • Event data
  • Change data
  • User data
  • User group data
  • Location data
  • Configuration management database (CMDB) configuration item (CI) data
After you install and configure this add-on, you can use workflow actions that link directly from events in the Splunk platform search results to relevant ServiceNow incidents, events, and knowledge base articles. You can also use the custom commands, alert actions, and scripts to create new incidents and events in your ServiceNow instance, and update the incidents created from the Splunk platform.

For more information about this add-ons custom commands, alert actions, and scripts, see About the commands, alert actions, and scripts available with the Splunk Add-on for ServiceNow.

This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk apps, such as the Splunk App for ServiceNow or Splunk Enterprise Security.

Download the Splunk Add-on for ServiceNow from Splunkbase.

For a summary of new features, fixed issues, and known issues, see Release Notes for the Splunk Add-on for ServiceNow.

For information about installing and configuring the Splunk Add-on for ServiceNow, see Installation and configuration overview for the Splunk Add-on for ServiceNow.

See Questions related to Splunk Add-on for ServiceNow on Splunk Answers.

Source types for the Splunk Add-on for ServiceNow

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Hi Kevopoly,

I'll email you directly and we can discuss how we can resolve this issue.

Nkaplan splunk, Splunker
September 11, 2019

We have tried to install the ServiceNow side application but are unable to do so because we are a Federal client. We have reached out to the support team several times without any answers over the past 4 weeks. Could someone on this product team please reach out to me directly? Very appreciated.

September 11, 2019

The latest release of the Splunk add-on for ServiceNow supports the Kingston, London, and Madrid releases.

Nkaplan splunk, Splunker
July 1, 2019

Hi Biassall,

We do not currently have a timeline for an updated version of this add-on that will support the London or Madrid releases of ServiceNow.

Nkaplan splunk, Splunker
June 3, 2019

Has Splunk worked to develop new versions to support London and Madrid ? If yes, is there any ETA?

June 3, 2019

Hi Msabia,

This add-on is supported for the Helsinki, Istanbul, Jakarta, and Kingston releases of ServiceNow.

Nkaplan splunk, Splunker
April 29, 2019

Is this supported for London and Madrid?

April 26, 2019

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters