Service Graph Connector for Google Console is unable to retrieve all the recordsIssue Even after successfully establishing a connection to Google Console, the SG-GoogleConsole-ChromeDevices scheduled import cannot retrieve the complete dataset from Google Console and only retrieves approximately (XXX-1) records out of the existing (XXX) records. SymptomsBelow details can be seen in the logs 2025-05-23 11:57:08 (004) worker.3 worker.3 txid=542bd33b3b21 ImportLog Processed: 130,300, inserts 130,300, updates 0, errors 0, empty and ignored 0, ignored errors 0 (0:58:20.372) 2025-05-23 11:57:07 (762) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 SEVERE *** ERROR *** sn_googleconsole_i (SGGoogleConsoleDevicesUtils): [SG-GoogleConsole] Failed due to: 401-undefined 2025-05-23 11:57:07 (726) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 event="HTTP_OUTBOUND_REQUEST" session_id="glide.scheduler.worker.3" user_name=“XXXX” protocol="HTTP/1.1" response_status="401" response_time="20" request_length="0" response_length="849" app_scope="sn_googleconsole_i" transaction_name="System Trigger-SG-GoogleConsole-ChromeDevices - system" transaction_id="542bd33b3b216e90bed5570864e45a87" source_table="sys_hub_step_instance" source_record="UNKNOWN" system_id="app135143.aus101.service-now.com:gcpsqa015" method="GET" log_level="All" log_type="SECLOG" tx_num="35531935" url="System Trigger-SG-GoogleConsole-ChromeDevices" domain="global" http_last_time="" user=“XX”XX user_id=“1ea122ea71b8879903e54c8092a4bcb5c" http_time_zone="US/Eastern" impersonator="system" user_group="n/a" http_browser="unknown" 2025-05-23 11:57:07 (726) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 OUTBOUND_HTTP: protocol=HTTP/1.1 response_status=401 response_time=20 request_length=0 response_length=849 app_scope=sn_googleconsole_i session_id=glide.scheduler.worker.3 transaction_name="System Trigger-SG-GoogleConsole-ChromeDevices - system" transaction_id=542bd33b3b216e90bed5570864e45a87 user_name=XXXX mid_server= source_table=sys_hub_step_instance source_record=UNKNOWN system_id=app135143.aus101.service-now.com:gcpsqa015 method=GET log_level=All scheme=https hostname=admin.googleapis.com path=/admin/directory/v1/customer/C00jwrgol/devices/chromeos 2025-05-23 11:57:07 (724) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** Unable to add tracking event - limit of 100 reached 2025-05-23 11:57:07 (705) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** Unable to add tracking event - limit of 100 reached 2025-05-23 11:57:07 (676) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: REST Msg Outbound - OAuthTokenRetriever : Not able to obtain a new access tokenurn:ietf:params:oauth:grant-type:jwt-bearer. Visit the record in oauth_2_0_credentials/145679a677b43110d223204bcd5a99de to re-establish the token 2025-05-23 11:57:07 (674) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 SEVERE *** ERROR *** Get Key failed: getSecretKey failed: Password is not ASCII java.security.UnrecoverableKeyException: Get Key failed: getSecretKey failed: Password is not ASCII at java.base/sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:450) at java.base/sun.security.util.KeyStoreDelegator.engineGetKey(KeyStoreDelegator.java:91) at java.base/java.security.KeyStore.getKey(KeyStore.java:1050) at com.glide.certificates.DBKeyStoreFactory.getPrivateKey(DBKeyStoreFactory.java:306) at com.snc.platform.security.oauth.jwt.JWTKeystoreAlias.getSigningKey(JWTKeystoreAlias.java:143) at com.snc.platform.security.oauth.jwt.JWTGenerator.validateAccessAndConfiguration(JWTGenerator.java:116) at com.snc.platform.security.oauth.jwt.JWTGenerator.getToken(JWTGenerator.java:90) at com.snc.platform.security.oauth.client.OAuthClientJWTBearerGrantType.constructGrantParams(OAuthClientJWTBearerGrantType.java:29) at com.snc.core_automation.connections.ConnectionInfoProvider.getConnectionInfo(ConnectionInfoProvider.java:113) at com.snc.process_flow.integration.IntegrationDataUtil.retrieveUsingAlias(IntegrationDataUtil.java:54) at com.snc.process_flow.operation.IntegrationConnectionDataResolverOperation.retrieveIntegrationInfoUsingAlias(IntegrationConnectionDataResolverOperation.java:216) at com.snc.process_flow.operation.IntegrationConnectionDataResolverOperation.innerRun(IntegrationConnectionDataResolverOperation.java:108) at com.snc.process_flow.operation.IntegrationConnectionDataResolverOperation.run(IntegrationConnectionDataResolverOperation.java:51) at com.snc.process_flow.engine.Operation.run2(Operation.java:90) at com.snc.process_flow.v2.exec.OpRunner.runOperation(OpRunner.java:75) at com.snc.process_flow.v2.exec.OpRunner.runOperation(OpRunner.java:69) at com.glide.plan.runners.FlowObjectExecutor.startFlowObjectSynchronously(FlowObjectExecutor.java:294) at com.glide.plan.runners.FlowObjectExecutor.executeToCompletion(FlowObjectExecutor.java:146) at com.glide.plan.runners.FlowObjectExecutor.executeInternalWithResponse(FlowObjectExecutor.java:136) at com.glide.plan.runners.FlowObjectExecutor.lambda$executeWithResponse$0(FlowObjectExecutor.java:69) at com.glide.sys.Transaction.executeWithTimeout(Transaction.java:3447) at com.glide.plan.runners.FlowObjectExecutor.executeWithResponse(FlowObjectExecutor.java:69) at com.glide.caller.gen.sys_script_include_5c4013c277f83110d223204bcd5a9984_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3089) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_script_include_5c4013c277f83110d223204bcd5a9984_script.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3089) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_data_source_d03af98677b43110d223204bcd5a9926_data_loader.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3089) at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:2998) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1928) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:1112) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:161) at com.glide.caller.gen.sys_data_source_d03af98677b43110d223204bcd5a9926_data_loader.call(Unknown Source) at com.glide.script.ScriptCaller.call(ScriptCaller.java:22) at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:160) at org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:719) at com.snc.automation.ScheduledImportJob.execute(ScheduledImportJob.java:66) at com.glide.schedule.JobExecutor.lambda$executeJob$1(JobExecutor.java:195) at com.glide.schedule.JobExecutor.executeJob(JobExecutor.java:198) at com.glide.schedule.JobExecutor.execute(JobExecutor.java:178) at com.glide.schedule.JobExecutor.execute(JobExecutor.java:168) at com.glide.schedule_v2.SchedulerWorkerThread.executeJob(SchedulerWorkerThread.java:609) at com.glide.schedule_v2.SchedulerWorkerThread.lambda$process$2(SchedulerWorkerThread.java:402) at com.glide.worker.TransactionalWorkerThread.executeInTransaction(TransactionalWorkerThread.java:35) at com.glide.schedule_v2.SchedulerWorkerThread.process(SchedulerWorkerThread.java:402) at com.glide.schedule_v2.SchedulerWorkerThread.run(SchedulerWorkerThread.java:178) Caused by: java.io.IOException: getSecretKey failed: Password is not ASCII at java.base/sun.security.pkcs12.PKCS12KeyStore.getPBEKey(PKCS12KeyStore.java:872) at java.base/sun.security.pkcs12.PKCS12KeyStore.lambda$engineGetKey$0(PKCS12KeyStore.java:365) at java.base/sun.security.pkcs12.PKCS12KeyStore$RetryWithZero.run(PKCS12KeyStore.java:257) at java.base/sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:361) ... 133 more Caused by: java.security.spec.InvalidKeySpecException: Password is not ASCII 2025-05-23 11:57:07 (673) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** string may not be encrypted: Input length must be multiple of 8 when decrypting with padded cipher 2025-05-23 11:57:07 (673) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** Access denied to crypto module 2025-05-23 11:57:07 (672) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 SEVERE *** ERROR *** Access Denied to cryptographic module 'global.com_snc_platform_security_oauth_glideencrypter' For guidance on this issue, please have your Security Admin refer to KB: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1112530 2025-05-23 11:57:07 (658) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 Started to generate JWT 2025-05-23 11:57:07 (640) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Successfully unwrapped key: da4ded301b2b011043accbb62a4bcb7d 2025-05-23 11:57:07 (639) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Found wrapped key in repo. Attempting to unwrap. 2025-05-23 11:57:07 (637) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Found keyId : da4ded301b2b011043accbb62a4bcb7d in store : com.glide.kmf.KMFDBModuleKeyStore@3cab39a2 2025-05-23 11:57:07 (633) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Added operation symmetric_unwrapping to module 2025-05-23 11:57:07 (633) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Added operation symmetric_wrapping to module 2025-05-23 11:57:07 (633) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Added operation symmetric_unwrapping to module 2025-05-23 11:57:07 (633) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Added operation symmetric_wrapping to module 2025-05-23 11:57:07 (633) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Added operation symmetric_unwrapping to module 2025-05-23 11:57:07 (633) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Added operation symmetric_wrapping to module 2025-05-23 11:57:07 (628) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: Restoring crypto module 8994cbe3ff23201022f462aa453bf13d from db 2025-05-23 11:57:07 (623) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 Getting JWTProviderConfig for jwtProviderId = 845679a677b43110d223204bcd5a9998 2025-05-23 11:57:07 (621) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 Getting JWTProvider for jwtProviderSysId = 845679a677b43110d223204bcd5a9998 2025-05-23 11:57:07 (621) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** Ignore oauth entity from request. Use provider from oauth entity profile. 2025-05-23 11:57:07 (618) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: REST Msg Outbound - OAuthTokenRetriever : Attempting to obtain new access token for grant type JWT bearer for requestorId: 145679a677b43110d223204bcd5a99de, requestorContext: oauth_2_0_credentials, OAuth profile: 545679a677b43110d223204bcd5a99d8, personal: false 2025-05-23 11:57:06 (959) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 event="HTTP_OUTBOUND_REQUEST" session_id="glide.scheduler.worker.3" user_name=“xxxx” protocol="HTTP/1.1" response_status="200" response_time="2053" request_length="0" response_length="3226979" app_scope="sn_googleconsole_i" transaction_name="System Trigger-SG-GoogleConsole-ChromeDevices - system" transaction_id="542bd33b3b216e90bed5570864e45a87" source_table="sys_hub_step_instance" source_record="UNKNOWN" system_id="app135143.aus101.service-now.com:gcpsqa015" method="GET" log_level="All" log_type="SECLOG" tx_num="35531935" url="System Trigger-SG-GoogleConsole-ChromeDevices" domain="global" http_last_time="" user=“XXXX” user_id=“3q45w2a1b879903e5c8092a4bb5c" http_time_zone="US/Eastern" impersonator="system" user_group="n/a" http_browser="unknown" 2025-05-23 11:57:06 (958) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 OUTBOUND_HTTP: protocol=HTTP/1.1 response_status=200 response_time=2053 request_length=0 response_length=3226979 app_scope=sn_googleconsole_i session_id=glide.scheduler.worker.3 transaction_name="System Trigger-SG-GoogleConsole-ChromeDevices - system" transaction_id=542bd33b3b216e90bed5570864e45a87 user_name= xxxx mid_server= source_table=sys_hub_step_instance source_record=UNKNOWN system_id=app135143.aus101.service-now.com:gcpsqa015 method=GET log_level=All scheme=https hostname=admin.googleapis.com path=/admin/directory/v1/customer/C00jwrgol/devices/chromeos 2025-05-23 11:57:06 (949) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** Unable to add tracking event - limit of 100 reached 2025-05-23 11:57:06 (927) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** Unable to add tracking event - limit of 100 reached 2025-05-23 11:57:04 (862) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: REST Msg Outbound - OAuthTokenRetriever : Using existing access token for requestorId: 145679a677b43110d223204bcd5a99de, requestorContext: oauth_2_0_credentials, OAuth profile: 545679a677b43110d223204bcd5a99d8, personal: falseReleaseService Graph Connector for Google Console - Version 1.0.0CauseThe following errors can be seen in the logs when the scheduled import attempts to auto-renew the access token. 2025-05-23 11:57:07 (676) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 DEBUG: REST Msg Outbound - OAuthTokenRetriever : Not able to obtain a new access tokenurn:ietf:params:oauth:grant-type:jwt-bearer. Visit the record in oauth_2_0_credentials/145679a677b43110d223204bcd5a99de to re-establish the token 2025-05-23 11:57:07 (674) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 SEVERE *** ERROR *** Get Key failed: getSecretKey failed: Password is not ASCII java.security.UnrecoverableKeyException: Get Key failed: getSecretKey failed: Password is not ASCII 2025-05-23 11:57:07 (673) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** string may not be encrypted: Input length must be multiple of 8 when decrypting with padded cipher 2025-05-23 11:57:07 (673) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 WARNING *** WARNING *** Access denied to crypto module2025-05-23 11:57:07 (672) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 SEVERE *** ERROR *** Access Denied to cryptographic module 'global.com_snc_platform_security_oauth_glideencrypter' For guidance on this issue, please have your Security Admin refer to KB: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1112530 2025-05-23 11:57:07 (658) worker.3 worker.3 txid=542bd33b3b21 SSI_5c4013c277f83110d223204bcd5a9984 Started to generate JWTResolution1. Access the below https://XXXX.service-now.com/sys_kmf_crypto_caller_policy_list.do?sysparm_query=crypto_module.aliasSTARTSWITHcom_snc_platform_security_oauth_glideencrypter%5Eresult!%3Dtrack%5EORresult%3DNULL%5Eactive!%3Dfalse&sysparm_view= 2. Update the module access policy to 'Track' https://XXXX.service-now.com/nav_to.do?uri=sys_kmf_crypto_caller_policy.do?sys_id=60a65ebf3be86250c73c111864e45a59https://XXXX.service-now.com/nav_to.do?uri=sys_kmf_crypto_caller_policy.do?sys_id=86ad41273b64ee10c73c111864e45a97 After making the above changes, when the access token is set to expire, the scheduled import job will be able to auto-renew the token, and it can be verified by accessing the HTTP outbound logs below. ↳ https://XXX.service-now.com/sys_outbound_http_log_list.do?sysparm_query=url%3Dhttps%3A%2F%2Foauth2.googleapis.com%2Ftoken%5Esys_created_onONLast%202%20hours%40javascript%3Ags.beginningOfLast2Hours()%40javascript%3Ags.endOfLast2Hours()&sysparm_view= *** NOTE *** To access the detailed logs in the sys_outbound_http_log table, you need to update the properties below with the corresponding values and revert them after testing, as this generates more logs. glide.rest.outbound.debug =trueglide.outbound_http.content.max_limit = 1000glide.outbound_http_log.override = trueglide.outbound_http_log.override.level = all Related LinksBelow are the scripts includes in the referenced module access policies. SGGoogleConsoleConnectionUtilshttps://XXX.service-now.com/nav_to.do?uri=sys_script_include.do?sys_id=0cabb1f977b03110d223204bcd5a9959 SGGoogleConsoleDevicesUtilshttps://XXX.service-now.com/nav_to.do?uri=sys_script_include.do?sys_id=5c4013c277f83110d223204bcd5a9984 KB reference Key Management Framework - Password2 - Access Denied Outbound web service logging properties