How to send event from Kibana to Snow using ServiceNow ITOM Connector

ninhnguyen
Tera Contributor

Hi Snow team!

 

I am working on integrating the our Kibana to send metrics Snow using ServiceNow ITOM Connector.

However when i tried to test sending events from Kibana, it requires the Severity params, I couldn't find anyplace to set this up.

Could you gimme some advise?

Much appreciate!!!

1 ACCEPTED SOLUTION

Hi @ninhnguyen 

 

you can try out Event Management on your PDI.

 

The request process for PDIs is simplified and possible after logging in at developer.servicenow.com:

 

MaikSkoddow_0-1703693682295.png

 

Maik

View solution in original post

13 REPLIES 13

Maik Skoddow
Tera Patron
Tera Patron

Hi @ninhnguyen 

whatever Kibana sends to ServiceNow is stored there in the em_event table. And that table also has a field "Severity". See https://docs.servicenow.com/bundle/vancouver-it-operations-management/page/product/event-management/... 

Maik

Rahul Priyadars
Giga Sage
Giga Sage

ITOM Connector will Send data to Events Table (EM_EVENT). Here is the SS for an event .

Severity of Event comes from Monitoring System.

RahulPriyadars_0-1703580205120.png

Severity value is also passed to ALERT Created Corresponding to Given Event.

RahulPriyadars_1-1703580292859.png

 

Alert Management Rule will Convert the Alert to Incident.

RahulPriyadars_2-1703580382946.png

OOTB many of the Event parameters are concatenated into Incident Description Field

RahulPriyadars_3-1703580438317.png

 

Regards

RP

ninhnguyen
Tera Contributor

Thanks @Rahul Priyadars  @Maik Skoddow for your replies

i am just a newbie on ServiceNow so forgive me for my dump question.
From your info, my understanding: i have to setup Event Management on my ServiceNow instance.
Do i need to setup MID server? or just install the Event Management plugin is enough? so that i can push a test event to ServiceNow.
I tried to go through some related articles but they made me confused

 

Thanks!

Hi @ninhnguyen 

If your Kibana is able to send data (make an Inbound Request call to the ServiceNow instance - it can be a Table API, Import Set API's or Scripted REST API call), you do not need a MID server and you can create an Incident from an event based on OOB Event Management.

Maik