Sentinel to ServiceNow work notes updates are not working

[Sofiya Perumal]

Hi Team,

I am inbetween integration microsoft sentinel with Servicenow. All working good except the work note part. The worknotes of Sentinel is not getting updated in ServiceNow. Do i need to customize anything in Scheduled job script. However, servicenow to sentinel updates are working fine.

Regards,

Sofiya

[Bhuvan]

@Sofiya Perumal 

Please check below thread 

https://www.servicenow.com/community/itsm-forum/bi-directional-incidents-sync-between-microsoft-sent...

In your Azure mapping, check work notes mapping is configured correctly and as per below documentation

https://www.servicenow.com/docs/bundle/zurich-security-management/page/product/secops-integration-si...

As per documentation, 'Synchronization of Microsoft Azure Sentinel incident comments with SIR Work notes' is supported out of box, check your configuration

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1209714

If this helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan