We are integrating Microsoft Sentinel with ServiceNow Incident Management. We are using the Microsoft Sentinel application which is available on the ServiceNow store. We have configured the app according to the instructions provided in the below community post --
Issue- We have configured the integration to create and close incidents in ServiceNow from Microsoft Sentinel. However, we are currently unable to update incident from ServiceNow to Sentinel incidents. This is preventing bidirectional synchronization between the two platforms.
any assistance is highly apricated. ServiceNow support is already denied.
Cloud-native SIEM for intelligent security analytics for your entire enterprise. - Azure-Sentinel/Solutions/Servicenow/StoreApp/README.md at master · Azure/Azure-Sentinel
Hi you are still facing issue with this integration ?
sorry i am new to this integration i need to do this for one of our customer also so i need configuration steps to buid the connectivity could you please help me on this to build connectivity ?
which one can i use for the build the connectivity
if i go thorugh microsoft docuemnt i stucked this is this right way i am going or any other way to configure this integration could please help me on this Thanks in advance rabbanisk18@gmail.com my personal id can we connect through this if i need any help
Has there been a fix for this yet? We're running into the same issue. Incidents are coming in from MS Sentinel, but any updates made on ServiceNow are not updated on Sentinel. It was working fine when we initially set it up, but stopped working shortly after with no change in configurations.
Hi @LaShandraS We resolved this issue a while ago, and it's now working as expected. Could you please share a screenshot of your configuration screen and the Sentinel app version details?
