Splunk integration setup

Setup procedures for the ServiceNow Security Operations add-on for Splunk include downloading the add-on file in Splunk, installing the add-on, and setting up the ServiceNow instance where security incidents and events are created.

Required role

Before performing Splunk integration setup procedures, ensure there is an integration user in ServiceNow with the sn_si.integration role.