Business Rule to copy Incident description to SIR when "Create Security Incident" button is clicked
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-06-2023 10:30 AM
Hello everyone,
How do I script in Business rule to achieve below requirement.
When "Create Security Incident" button (existing UI Action) is clicked within an Incident record, the Description field contents for the Incident should be copied to the Description field within the resulting Security Incident.
Please help. TIA

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-06-2023 11:53 AM
Hi @Snow Angel ,
You can have a onAfter insert BR without any code as below
you have to click on "Show Related List" to find Task >Task fields > Type is Incident
Action section values:
Show related list>parent>parent fields>Description
Thank you,
Hemanth
Certified Technical Architect (CTA), ServiceNow MVP 2024, 2025
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-06-2023 12:30 PM
Hi Hemanth,
I'm only getting Task Type as "security incident" as I'm on sn_si_incident table. Please advice. Thanks

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-06-2023 11:26 PM - edited ‎10-06-2023 11:28 PM
Hi @Snow Angel ,
Look for Parent>Task Fields >Task Type >Incident
(make sure you clicked on Show related list at the bottom of the list to show these fields):
And in the action section > Description same as parent>task fields>description (here also click on show related list)
let me know if any questions.
I know we can do it in the "Create Security Incident" UI action however creation of security incident is in script include and i wouldn't recommend to disturb the OOB logic.
Thank you,
Hemanth
Certified Technical Architect (CTA), ServiceNow MVP 2024, 2025

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-06-2023 12:43 PM
You need to make changes to the Create Security Incident UI action to copy the incident description to the security incient.
Please mark this response as correct or helpful if it assisted you with your question.