Install the ServiceNow Security Operations add-on for Splunk

You must install the ServiceNow Security Operations add‐on for Splunk to link Splunk to ServiceNow.

1. Open Splunk.
2. Click either the Apps gear icon, or the Manage Apps shortcut menu item.
3. Click Install app from file.
4. Click Choose File, select sn_sec_ops.spl, and click Upload.
5. If prompted, click Restart Splunk.
   The ServiceNow Security Operations add-on for Splunk is installed and ready to be set up.