Rapid7 SIEM (InsightIDR) Integration

[Jessica Hall]

Has anyone set up a successful integration between ServiceNow & Rapid7 SIEM (InsightIDR) for automated Incident tickets within ITSM? Were you able to configure it with just a user account, API, Oauth connection, etc? 

Rapid7's documentation appears to be outdated and lacking complete setup steps. 

[Tanushree Maiti]

As per this page : https://docs.rapid7.com/insightconnect/servicenow/

You can create, search, update, and manage ServiceNow incidents with the ServiceNow plugin for Automation (InsightConnect) .

Additionally, you can also use this plugin to monitor and process incident changes in a Rapid7 Automation (InsightConnect) workflow.

To use the ServiceNow plugin, use an existing user account or create a dedicated user account to configure the connection in Automation (InsightConnect). For more information on the functionality of the ServiceNow plugin, see the Extension Library listing 

Refer this , if it helps.

https://docs.rapid7.com/insightidr/servicenow/ 

Manage Credentials