Find your people. Pick a challenge. Ship something real. The CreatorCon Hackathon is coming to the Community Pavilion for one epic night. Every skill level, every role welcome. Join us on May 5th and learn more here.

Rapid7 SIEM (InsightIDR) Integration

Jessica Hall
Tera Expert

3 weeks ago - last edited 3 weeks ago

Has anyone set up a successful integration between ServiceNow & Rapid7 SIEM (InsightIDR) for automated Incident tickets within ITSM? Were you able to configure it with just a user account, API, Oauth connection, etc? 

 

Rapid7's documentation appears to be outdated and lacking complete setup steps. 

Labels:
0 Helpfuls
  • 1,045 Views
1 REPLY 1

Tanushree Maiti
Kilo Patron

3 weeks ago

As per this page : https://docs.rapid7.com/insightconnect/servicenow/

You can create, search, update, and manage ServiceNow incidents with the ServiceNow plugin for Automation (InsightConnect) .

Additionally, you can also use this plugin to monitor and process incident changes in a Rapid7 Automation (InsightConnect) workflow.

To use the ServiceNow plugin, use an existing user account or create a dedicated user account to configure the connection in Automation (InsightConnect). For more information on the functionality of the ServiceNow plugin, see the Extension Library listing 

 

Refer this , if it helps.

https://docs.rapid7.com/insightidr/servicenow/ 

Manage Credentials 

Please mark this response as Helpful & Accept it as solution if it assisted you with your question.
Regards
Tanushree Maiti
ServiceNow Technical Architect
Linkedin:
0 Helpfuls