(new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email", false)

[suryaprakash123]

Dear Team,

I found mentioned condition in the inbound email action.

Condition: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email", false)

The condition was failing, hence no security incident was not created. Unfortunately, we are unable to see 'SMConfiguration' script include. Please find mentioned screenshots and let me know, how to create SI by satisficing the condition.

I referred this as well but no luck: https://www.servicenow.com/community/service-management-forum/explain-this-script/m-p/373455 

[Tony Chatfield1]

I have just installed Security Incident Response in a PDI and still do not have an inbound action with the condition you posted above.

[suryaprakash123]

Hi @Tony Chatfield1 

I am able to see (Create Security Incident) inbound action in my PDI as well post installing the required plugins. kindly refer below link for the same.

https://instancenumber/sysevent_in_email_action.do?sys_id=c797c663ff123100158bffffffffff84&sysparm_r...

Thank you.

[Tony Chatfield1 · Accepted solution]

Apologies the inbound action was not found due to local (L)user error at my end.

Documentation is sparce for SMConfiguration() but this thread provides some information and identifies the sm_config table

Re: SMConfiguration Functionality - ServiceNow Community

Looking at sm_config.list my PDI has 1 entry for 'Security Incident' and once Accept inbound email was set true, the condition check was met during inbound actioning processing and a security incident was created in my PDI from my test email. So this should be all you need to update.

[suryaprakash123]

Hi @Tony Chatfield1 ,

I checked the 'Accept Inbound email' in sm_config, security incident was created. 

Thanks a lot for your time and help.

Thank you.