Hi Team, there is a requirement from client to create a dashboard for Security incident and make that visible to end users(snc_external) in CSM portal. Can you please suggest the possible ways. Thanks,Pooja
Hi,Few of our exception rules gets expired in a week, so when I clicked on request exception button, fill in the details and submit it, the page just reloads and nothing happens, don't see any approvals getting triggered. Please assist.
We are using OOB VR and integrated with Microsoft Threat & Vulnerability Management. It created a bunch of Discovered Items some of them are Unmatched. We were wondering how Matching type of DI was populated as Created by IRE, also is there any techn...
If I create a report based on created date and request ID so I can get in particular time frame how many requests created, or we have.currently i am getting below data on y axis - same day, 2 days, 2-5 days, 5-7 days, 1-2 weeks .....etc Now i want t...
Hi, I have enabled the OOB plugins for SIR and SIR UI and need to access playbooks from security incident New UI. While clicking on playbook icon I am getting the message "No playbook found , Please contact your administrator". all the runbooks are i...
Hello all, I have implemented the Splunk ES integration with SecOps to automate notable ingestion. We are polling Splunk to fetch notables every 4 minutes. I want to know when we send a poll to Splunk, how far in the past is ServiceNow trying to requ...
I am trying to filter the data that comes from Rapid7 to SN VR module based on the asset tags in Rapid7. Although SN provided a documentation on adding additional parameters (https://www.servicenow.com/docs/bundle/xanadu-security-management/page/prod...
One Application Service record was created when the scanned data was linked to ServiceNow.This was not included in the original scan data, and a new Application Service was created when Windows with dependencies was registered.If anyone knows the rea...
Hi folks,I have two questions about VR Tenable integration. The screenshot is from PDI.1. Can someone explain me the difference between Tenable.io and Tenable.sc?2. Which scheduled job should I keep active to import daily data from Tenable to SN?
Hi, If anyone is interested, you may consider voting this idea up: Word Doc or PDF for SIR Post Incident Review
Hi All,We are trying to integrate Splunk with ServiceNow using Splunk ES Integration for Security Operations plugin. Authentication is successful but the alert rules are not getting imported into ServiceNow. We tried the below troubleshooting steps y...
Hi All, We are currently in process of configuring the Vulnerability Response module on our instance. We are ingesting scan data from Qualys using and Defender using the OOB plugins. On some of our CIs we have both Qualys and Defender running, and t...
I need the value in Approval For field because i have to send notification to the assignment group for Vulnerable Item & Remediation Task requested, approved & reject for Exception request.
Hi all, I would like to enable the export feature that can be found on the SIR workspace, both via the homepage and list view, users have a 'Export' UI action (this appears to be the same functionality as right-clicking on the form header > export > ...
I am considering activating Flow Designer in our Vulnerability Response application.We have only a couple of workflows created historically. Does activating Flow Designer in VR have any adverse effects on current Workflows created? Or is there a mi...
