How do I send notifications to ServiceNow?

Set up the Alert Webhook in Splunk Synthetic Monitoring

1. In Splunk Synthetic Monitoring, go to Admin > Alert Webhooks > + New and click ServiceNow.
2. Under Name, provide a name for your webhook.
3. Click Generate Header to generate the encoded authorization header that will be used with this webhook. Provide the credentials for the ServiceNow user that will be used to create an incident. Note: Make sure the ServiceNow user has the permissions to create, modify and close incidents.
4. Under Triggers, select the triggers you want to activate. There are two types: 'When failed' and 'When back online'. 'When failed' opens a new incident in ServiceNow when a check fails and 'When back online' closes that same incident when that check resumes functioning. Note: you should not use the 'When back online' trigger without also using a 'When failed' trigger.
5. Paste the base URL of your ServiceNow instance and edit the Webhook URLs for each trigger's endpoint, replacing "<<YOUR_SERVICENOW_BASE_URL>>" with the base URL for your ServiceNow instance.
6. (optional) Click JSON to open the JSON request body for the API request that will be sent to HipChat upon the trigger event. Edit the JSON as needed to change the text and alert format to something that better suits your workflow, and then click Save. Note: When customizing a 'When back online' trigger, the state and close_code fields should not be changed.
7. Click Test test your webhook by sending a request to the ServiceNow endpoint.
8. Click Create to save the webhook.

Add your webhook to a check 

You need to add your webhook to each check you want to send notifications from. To add your webhook to a check, do the following:

1. Navigate to a check in Splunk Synthetic Monitoring, click the gear icon, and select Edit from the dropdown.
2. Click the Notifications tab.
3. Under Notify, select your desired notification trigger. 
4. Under Recipients, select your new webhook from the dropdown. 
5. Adjust the additional settings to your preferences. 
6. Click Save.

With the webhook set up, new ServiceNow incidents will be created with the specified details any time a check to which the webhook has been added fails. The incident will be closed automatically when the check is back online.