Splunk ES Event Profile mapping is not handling commas properly for Observable mappingsIssue Test Use Case: Configure Splunk ES Event Profile mapping to automatically create ServiceNow SIR tickets.Update the profile mappings to reference some fields (for example Email fields):Observable(Email subject) Have a sample value for Email subject that includes a comma (,) as part of the value. For example: "Hello, ServiceNow! This is a test!"ACTUAL RESULT: The mapping would only add "Hello" in the Observable - with type unknown, and drop the remainder of the sample value (e.g. "ServiceNow! This is a test!")CauseIn the Splunk settings page, there is a property called "delimiter" and by default, it is set to comma (,) If this setting is not set, there is ServiceNow code that will, by default, set the delimiter to comma (,) i.e: In the "SplunkESFieldMapProcessor" script include, on line number 19 we are setting the "_DELIMITER" property.ResolutionIf the system property 'sn_sec_splunkes.delimiter' is set, ServiceNow code will utilize this setting. Otherwise, the code will utilize comma (,) as the default delimiter.