Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

How to send event from Kibana to Snow using ServiceNow ITOM Connector

ninhnguyen
Tera Contributor

Hi Snow team!

 

I am working on integrating the our Kibana to send metrics Snow using ServiceNow ITOM Connector.

However when i tried to test sending events from Kibana, it requires the Severity params, I couldn't find anyplace to set this up.

Could you gimme some advise?

Much appreciate!!!

1 ACCEPTED SOLUTION

Hi @ninhnguyen 

 

you can try out Event Management on your PDI.

 

The request process for PDIs is simplified and possible after logging in at developer.servicenow.com:

 

MaikSkoddow_0-1703693682295.png

 

Maik

View solution in original post

13 REPLIES 13

Maik Skoddow
Tera Patron
Tera Patron

Hi @ninhnguyen 

whatever Kibana sends to ServiceNow is stored there in the em_event table. And that table also has a field "Severity". See https://docs.servicenow.com/bundle/vancouver-it-operations-management/page/product/event-management/... 

Maik

Rahul Priyadars
Tera Sage

ITOM Connector will Send data to Events Table (EM_EVENT). Here is the SS for an event .

Severity of Event comes from Monitoring System.

RahulPriyadars_0-1703580205120.png

Severity value is also passed to ALERT Created Corresponding to Given Event.

RahulPriyadars_1-1703580292859.png

 

Alert Management Rule will Convert the Alert to Incident.

RahulPriyadars_2-1703580382946.png

OOTB many of the Event parameters are concatenated into Incident Description Field

RahulPriyadars_3-1703580438317.png

 

Regards

RP

ninhnguyen
Tera Contributor

Thanks @Rahul Priyadars  @Maik Skoddow for your replies

i am just a newbie on ServiceNow so forgive me for my dump question.
From your info, my understanding: i have to setup Event Management on my ServiceNow instance.
Do i need to setup MID server? or just install the Event Management plugin is enough? so that i can push a test event to ServiceNow.
I tried to go through some related articles but they made me confused

 

Thanks!

Hi @ninhnguyen 

If your Kibana is able to send data (make an Inbound Request call to the ServiceNow instance - it can be a Table API, Import Set API's or Scripted REST API call), you do not need a MID server and you can create an Incident from an event based on OOB Event Management.

Maik