How to send event from Kibana to Snow using ServiceNow ITOM Connector

[ninhnguyen]

Hi Snow team!

I am working on integrating the our Kibana to send metrics Snow using ServiceNow ITOM Connector.

However when i tried to test sending events from Kibana, it requires the Severity params, I couldn't find anyplace to set this up.

Could you gimme some advise?

Much appreciate!!!

[Rahul Priyadars]

Hi

This is how the flow is 

Monitoring System--Event--->Service Now Event Record---Service Now Alert Record ---Service Now Incident

For this Flow you definitely Need Event Management Plugin Enabled on Your System.

(1) If your monitoring System is Behind the Secure N/W then you need Mid Server (Pull from ServiceNow)

(2) if your monitoring System is exposed on Internet - then U do not need Mid Server as Service Now Can reach the System using API.

Now As Maik Said - Kibana can Consume Service Now REST/Scripted Rest etc to Post event data to Service Now Event Table (em_event).

POST https://dev76115.service-now.com/api/now/table/em_event

This KB explains basics of Service Now Event Management

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0756665

Regards

RP

[ninhnguyen]

Thanks again @Maik Skoddow @Rahul Priyadars 

I tried to install EventManagent plugin on my Snow instance but it seems my account is just developer level and not under any company Snow license so i couldn't login snow store to request plugin and install. is that correct?

if Yes, i will find the support from higher manager to get license.

Could you gimme some advice? it is blocking me to go further to evaluate the integration test with ServiceNow.

FYI: i got this notify when request Plugin or login to ServiceNow Store

[Maik Skoddow · Accepted solution]

Hi @ninhnguyen 

you can try out Event Management on your PDI.

The request process for PDIs is simplified and possible after logging in at developer.servicenow.com:

Maik

[ninhnguyen]

Thanks @Maik Skoddow @Rahul Priyadars  for you warmly support.

I activated the EventManagement plugin on my instance.

I also tried to follow up some articles but couldn't figure out where/how to start to use it to integrate with connector of Kibana.

I see that ServiceNow support various connectors but not for ITOM connector on Kibana.
https://docs.servicenow.com/bundle/vancouver-it-operations-management/page/product/event-management/...

Could you gimme some glue/advise to start working on it?

Do i need to setup Event Rules, Event Field Mapping or start any other initial steps?

Much appreciated Gents!!!

[Maik Skoddow]

Hi @ninhnguyen 

we are far away from your initial topic of your question, and I would appreciate it if you could mark one of my answers as "Accepted".

Furthermore, I cannot teach you event management via comment threads. I only can recommend taking a look on my page Event Management which provides many links to further resources.

Maik