question Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email" in Developer forum

(new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email", false)

suryaprakash123 — Wed, 07 Dec 2022 20:48:13 GMT

Dear Team,

I found mentioned condition in the inbound email action.

Condition: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email", false)

The condition was failing, hence no security incident was not created. Unfortunately, we are unable to see 'SMConfiguration' script include. Please find mentioned screenshots and let me know, how to create SI by satisficing the condition.

I referred this as well but no luck: https://www.servicenow.com/community/service-management-forum/explain-this-script/m-p/373455

Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email"

Tony Chatfield1 — Wed, 07 Dec 2022 21:25:52 GMT

Hi, the post you have linked to implies that the script-include can be seen in an instance
- but I cannot see any vendor documentation for SMConfiguration().

If you have no visibility of the script-include this may be as it's hidden, or may be as it is deployed via a plugin or app that is not active in your instance and as best practice you should not consider leveraging\utilizing ServiceNow functions or API's that are not documented in the public domain.

If you do not include the condition then you should be able to create your record?

Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email"

suryaprakash123 — Thu, 08 Dec 2022 03:10:50 GMT

Hi @Tony Chatfield1

Thank you for your reply.

I am able to create a record by removing the condition but this was defined in the oob. Can I remove the condition?

Thank you.

Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email"

Tony Chatfield1 — Thu, 08 Dec 2022 03:23:56 GMT

Hi, if it is OOB then perhaps you should leave as is, and look at why the function is not returning the result you are expecting. I do not see this condition in any OOB PDI inbound action and you have not provided any clear details of your intentions or the platform functionality this relates to, is the action part of a plugin or app?

If yes ,have you reviewed the documentation and confirmed that your configuration is correct, it looks like the function validates\confirms if the inbound action is entitled to create a task\security incident?

Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email"

suryaprakash123 — Thu, 08 Dec 2022 03:29:38 GMT

Hi @Tony Chatfield1,

Apologies for not giving prior details,

I guess, this comes post we installed security incident response plug-ins.

If the condition met, it should trigger an security incident.

Thank you.

Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email"

Tony Chatfield1 — Thu, 08 Dec 2022 03:57:21 GMT

I have just installed Security Incident Response in a PDI and still do not have an inbound action with the condition you posted above.

Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email"

suryaprakash123 — Thu, 08 Dec 2022 04:25:40 GMT

Hi @Tony Chatfield1

I am able to see (Create Security Incident) inbound action in my PDI as well post installing the required plugins. kindly refer below link for the same.

https://instancenumber/sysevent_in_email_action.do?sys_id=c797c663ff123100158bffffffffff84&sysparm_record_target=sysevent_in_email_action&sysparm_record_row=4&sysparm_record_rows=4&sysparm_record_list=nameCONTAINScreate+security%5EORDERBYorder

Thank you.

Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email"

Tony Chatfield1 — Thu, 08 Dec 2022 08:00:04 GMT

Apologies the inbound action was not found due to local (L)user error at my end.

Documentation is sparce for SMConfiguration() but this thread provides some information and identifies the sm_config table

Re: SMConfiguration Functionality - ServiceNow Community

Looking at sm_config.list my PDI has 1 entry for 'Security Incident' and once Accept inbound email was set true, the condition check was met during inbound actioning processing and a security incident was created in my PDI from my test email. So this should be all you need to update.

Re: (new sn_sm.SMConfiguration()).isEnabled("security_incident", "inbound_email"

suryaprakash123 — Thu, 08 Dec 2022 10:22:03 GMT

Hi @Tony Chatfield1 ,

I checked the 'Accept Inbound email' in sm_config, security incident was created.

Thanks a lot for your time and help.

Thank you.