Hi,
I am trying to get the ServiceNow add-on to work on a distributed Splunk infrastructure namely a HF. I have tried configuring it from the GUI and conf files, though there are differences as to how each modifys/creates apps in the local folder neither has worked...
Splunk Enterprise 6.5.1
Splunk Add-on for ServiceNow 2.9.0
Linux OS
* Using proxy settings (tried both IP and FQDN as per hxxps://answers.splunk.com/answers/312287/splunk-app-add-on-for-servicenow-why-am-i-getting.html I did try adding "http://" at the beginning), seems like my proxy is socks 4/5 as using http as a option comes up with "HTTPError: (407, 'Proxy Authentication Required')" in the logs
* Tested SNOW user/pwd combo on the system itself with no issues
* Changed the web.conf setting to "splunkdConnectionTimeout = 30000" so shouldn't be timing out...
* When configuring the app via conf files, tried placing both username/password into the service_now.conf along with the other settings but this didn't work
* When configuring the app via GUI, it placed "encrypted" in the username & password field values for both SNOW and Proxy settings... Within the passwords.conf file (which isn't on the docs page about configuring it via conf files...) it has the conf file set out as:
**service_now.conf**
[snow_default]
collection_interval = 120
priority = 10
record_count = 1000
loglevel = INFO
since_when =
display_value = false
[snow_account]
url = https://blah.service-now.com
release = Automatic
username =
password =
[snow_proxy]
proxy_enabled = 1
proxy_url = ip/fqdn
proxy_port = 8080
proxy_username =
proxy_password =
# If use proxy to do DNS resolution, set proxy_rdns to 1
proxy_rdns = 0
# Valid proxy_type are http, http_no_tunnel, socks4, socks5
proxy_type = socks5
**passwords.conf**
[credential:https\://.service-now.com:dummy:]
password =
[credential::dummy:]
password =
And yes the "dummy" is actually what the webgui puts in place of the actual username, though I have tried editing this manually in the passwords.conf file with no effect to get it to work.
**splunk_ta_snow_main.log:**
2017-03-08 14:29:17,488 ERROR pid=6473 tid=MainThread file=snow.py:run:82 | Failed to setup config for Snow TA: Failed to verify ServiceNow username and password, reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 175, in verify_user_pass
resp, content = http.request(url)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/__init__.py", line 1593, in request
(response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/__init__.py", line 1335, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/__init__.py", line 1257, in _conn_request
conn.connect()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/__init__.py", line 1018, in connect
sock.connect((self.host, self.port))
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 410, in connect
self.__negotiatesocks5(destpair[0], destpair[1])
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 215, in __negotiatesocks5
chosenauth = self.__recvall(2)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 138, in __recvall
data = self.recv(count)
timeout: timed out
2017-03-08 14:29:17,488 ERROR pid=6473 tid=MainThread file=snow.py:run:83 | Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow.py", line 80, in run
snow_conf = snow_config.SnowConfig()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 39, in __init__
default_configs = self._get_default_configs()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 107, in _get_default_configs
self.conf_manager, conf_copy, self.appname)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 127, in fix_snow_release
fixed_release = SnowConfig.get_snow_release(defaults)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 190, in get_snow_release
SnowConfig.verify_user_pass(defaults)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 180, in verify_user_pass
raise Exception(msg)
Exception: Failed to verify ServiceNow username and password, reason=Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/snow_config.py", line 175, in verify_user_pass
resp, content = http.request(url)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/__init__.py", line 1593, in request
(response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/__init__.py", line 1335, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/__init__.py", line 1257, in _conn_request
conn.connect()
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/__init__.py", line 1018, in connect
sock.connect((self.host, self.port))
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 410, in connect
self.__negotiatesocks5(destpair[0], destpair[1])
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 215, in __negotiatesocks5
chosenauth = self.__recvall(2)
File "/opt/splunk/etc/apps/Splunk_TA_snow/bin/httplib2/socks.py", line 138, in __recvall
data = self.recv(count)
timeout: timed out
Thanks in Advance