LogoLogo
WebsiteBlogLogin
  • Onum Docs
  • Use Cases
  • Videos
  • Release Notes
  • Welcome
  • Getting Started
    • About Onum
    • Architecture
    • Deployment
    • Getting Started with Onum
    • Understanding The Essentials
      • Cards and Table Views
      • Data Types
      • Graph Calculations
      • The Time Range Selector
    • Key Terminology
  • THE WORKSPACE
    • Home
    • Listeners
      • Cloud Listeners
      • Listener Integrations
        • Amazon SQS
        • Amazon S3
        • Apache Kafka
        • Azure Event Hubs
        • Cisco NetFlow
        • Google Cloud Storage
        • Google Pub/Sub
        • HTTP
        • HTTP Pull
        • Microsoft 365
        • OpenTelemetry
        • Syslog
        • TCP
      • Labels
    • Pipelines
      • Building a Pipeline
        • AI Assistant
          • AI Pipeline Assistant
          • AI Action Assistant
      • Listeners
      • Actions
        • Advanced
          • Anonymizer
          • Bring Your Own Code
          • Field Generator
          • For Each
          • Google DLP
          • HTTP Request
          • Redis
        • Aggregation
          • Accumulator
          • Group By
        • AI
          • Amazon GenAI
          • BLIP-2
          • Cog
          • Google GenAI
          • Llama
          • Replicate
        • Detection
          • Sigma Rules
        • Enrichment
          • Lookup
        • Filtering
          • Conditional
          • Sampling
        • Formatting
          • Message Builder
        • Transformation
          • Field Transformation
            • Field Transformation Operations
              • Arithmetic / Logic
                • Divide Operation
                • Median
                • Multiply Operation
                • Subtract Operation
                • Sum Operation
              • Code tidy
                • JSON Minify
              • Control characters
                • Escape String
                • Unescape String
              • Conversion
                • Convert Area
                • Convert Data Units
                • Convert Distance
                • Convert Mass
                • Convert Speed
                • List to String
                • String to List
              • Data format
                • From Base
                • From Base64
                • From Hex
                • To Base
                • To Base64
                • To Hex
              • Date / Time
                • From Unix Timestamp
                • To Timestamp
                • To Unix Timestamp
                • Translate Datetime Format
              • Encoding / Decoding
                • From Binary
                • To Binary
                • To Decimal
              • Encryption / Encoding
                • JWT Decode
              • File system permissions
                • Parse Unix file permissions
              • Format conversion
                • CSV to JSON
                • JSON to CSV
              • Hashing
                • Keccak
                • MD2
                • MD4
                • MD5
                • SHA0
                • SHA1
                • SHA2
                • SHA3
                • Shake
                • SM3
              • List manipulation
                • Index list boolean
                • Index list float
                • Index list integer
                • Index list string
                • Index list timestamp
              • Networking
                • Defang IP Address
                • Defang URL
                • Extract IP Address
                • Fang IP Address
                • Fang URLs
                • IP to Hexadecimal
                • Parse URI
                • URL Decode
                • URL Encode
              • Other
                • Parse Int
              • String
                • Length
              • Text sample adding
                • Pad Lines
              • Utils
                • Byte to Human Readable
                • Count Occurrences
                • CRC8 Checksum
                • CRC16 Checksum
                • CRC24 Checksum
                • CRC32 Checksum
                • Credit Card Obfuscator
                • Filter
                • Find and Replace
                • Regex
                • Remove Whitespace
                • Reverse String
                • Shuffle
                • Sort
                • Substring
                • Swap Case
                • To Lower Case
                • To Upper Case
          • Flat JSON
          • JSON Transformation
          • JSON Unroll
          • Math Expression
          • Parser
            • PCL (Parser Configuration Language)
        • Utils
          • Unique
      • Data sinks
      • Bulk Changes
      • Publishing & Versioning
      • Test your Pipeline
    • Data sinks
      • Data sink Integrations
        • Amazon S3
        • Amazon SQS
        • Azure Blob Storage
        • Azure Event Hubs
        • Devo
        • Google BigQuery
        • Google Cloud Storage
        • Google Pub/Sub
        • HTTP
        • Jira
        • Mail
        • Null
        • OpenTelemetry
        • PagerDuty
        • Pushover
        • Qradar
        • Relational Databases
        • ServiceNow
        • Slack
        • Splunk HEC
        • Syslog
        • TCP
        • Telegram
        • Twilio
    • Alerts
  • YOUR VAULT
    • Enrichment
    • Data History
    • Actions
  • ADMINISTRATION
    • Tenant Menu
    • Global Settings
      • Your Account
      • Organization Settings
        • Secrets Management
      • Tenant
        • Authentication
        • Users
        • Activity Log
        • API Keys
  • MARKETPLACE
    • Onum Marketplace
      • Pulling Pipelines
        • Netskope Events Alert
        • OKTA System Log API
        • Sophos Connector SIEM
Powered by GitBook
On this page
  • Overview
  • Configuration
  • Metadata
  • Metrics
  • Configuration

Was this helpful?

Export as PDF
  1. THE WORKSPACE
  2. Data sinks
  3. Data sink Integrations

ServiceNow

Most recent version: v0.0.3

PreviousRelational DatabasesNextSlack

Last updated 2 months ago

Was this helpful?

See the changelog of this Data sink type .

Overview

ServiceNow is a cloud platform that offers an array of services and applications designed for IT and workflow management. Incidence integration allows Onum to create an instance in ServiceNow when a problem has been detected or to create alerts and possible incidents.

Select ServiceNow from the list of Data sink types and click Configuration to start.


Configuration

Now you need to specify how and where to send the data, and how to establish a connection with Service Now.

Metadata

Enter the basic information for the new Data Sink.

Parameters
Description

Name*

Enter a name for the new Data Sink.

Description

Optionally, enter a description for the Data Sink.

Tags

Add tags to easily identify your Sink. Hit the Enter key after you define each tag.

Metrics

How to connect to ServiceNow
  1. Set the password and store it for later use.

  1. Ensure the user has the snc_platform_rest_api_access set. To set the user role, click the Roles tab in the user details view.

Incidents

The required fields are short_description, which will be set through the event, and caller_id, which will be set in the configuration. caller_id represents the user that created the configuration, and you can set this in the User ID from the user form.

Incidents will be created using event fields.

Example:

{
    "caller_id": "user123",
    "comments": "Additional comments here",
    "category": "IT",
    "correlation_display": "Alert Label",
    "correlation_id": "correlation123",
    "description": "Description of the incident",
    "impact": "1",
    "severity": "2",
    "short_description": "ServiceNow Incident",
    "subcategory": "Software",
    "urgency": "1"   
}

To find incidents on the ServiceNow platform, open the dashboard and search for an incident. Click All under Incident.

In the list of Incidents, filter incidents based on Caller and enter the User you created or order by latest.

Configuration

Now add the configuration to establish the connection.

Parameter
Description

ServiceNow Instance URL*

Add your custom, instance, or script instance URL.

Go to Manage > My Instance to find it.

You can also find the URL in your Development Dashboard link. All ServiceNow instances follow the naming convention https://<INSTANCE NAME>.service-now.com.

Basic Authentication

Parameter
Description

Username*

Add the username used to connect to the server.

Password*

Rate Limiter Configuration

Establish a limit for the amount of requests permitted per second.

Parameter
Description

Number of requests per second*

Enter a maximum number of requests.

Proxy Configuration

If your organization uses proxy servers, establish the connection here.

  • Proxy Port

  • Proxy Username

  • Proxy Password

  • Proxy Scheme

Click Finish when complete.

Decide whether or not to include this Data sink info in the metrics and graphs of the area.

Once logged in to your ServiceNow instance, you need to create a user to create incidents. To do this, go to the dashboard and search users. Under either Users and Groups or Administration, click Users. Clicking on the Users tab will display a list of all users, where you can add new users with the New button in the top right corner. For detailed instructions, go to

To use the ServiceNow sink, you must first create a personal developer instance. ServiceNow offers free , which you can use to test incidents.

Create or add a password from your .

Home
add user.
Personal Developer Instances
Secrets
here