Resolved! how to insert a record from back ground script through JSON format?
I need to insert a record in Incident table through JSON format can anyone help to let it happen??
Forum Posts
Resolved! Security Tickets
Is it possible to lock down an individual security incident ticket to the assignee and their manager to view and edit only? For example, if we had a checkbox to tick as "confidential", it would then lock it down to just the assignee and manager to vi...
Vulnerability Response Tables Mindmap
Here's a mindmap I've made, breaking down all of the many tables that come along with the baseline ServiceNow Vulnerability Response offering. My hope is that this provides value to ServiceNow developers and implementers new to the Security Operation...
ServiceNow integration with QRADAR
I need all the detail about how to configure integration between ServiceNow and QRADAR (IBM). Please provide the specifics of steps after the QRADAR plugin is installed. Thanks for all the help.
New NowLearning Course Alert: Security Posture Control Implementation Bootcamp
Exiciting Announcement: Introducing our latest course - "Security Posture Control Implementation Bootcamp On Demand" Are you ready to take your ServiceNow® Security Operations skills to the next level? We're thrilled to unveil our newest course, ...
Resolved! Exception Questionnaire
I am wondering how the Exception Questionnaire in Vulnerability Response is useful for approvers/where the answers can be found? I know the metric results and assessment instance questions are linked to the state change approval record, but they aren...
Resolved! machine_filter on Vulnerability response Microsoft TVM
Im trying to apply a machine_filter for importing machines from Microsoft TVM in VR. The filters the machines being imported as CIs, but doesn not filter the vulnerabilities on machines, so we end up with a lot of vulnerabilities that we do not want ...
Deactivate or delete a Remediation Effort?
Could someone please guide me on how I can "delete" or "deactivate" a Remediation Effort? It seems according to ACLs, no one can delete an effort, even Admins. But it appears there should be a way to deactivate one, but it is all grayed out. Are th...
Best solution for VITs with multiple locations of vulnerabilities
We have various VITs, like for QID-106032 (Apache Log4j 1.X Detected), where in the results there are a dozen or two locations of Log4j jar files. In these instances, each of those locations in owned by a separate application team. Is there a way to...
Resolved! Adding new states to Security Incidents
Got a request in to add new States into Security Incidents. I've been looking to try and add these, but while I can add them to the Choice List, they will not appear in the drop down at any point. Also can't see to add anything to the Process Flow as...
How is the 'Vulnerable Item.Last Found' field supposed to be populated from Qualys, especially with multiple Detection Records?
Hi, We use Qualys integration with Vulnerability Response and have used the Vulnerable Item.Last Found field to determine the last time a vulnerability was found on the vulnerable item. However, if the Vulnerable Item has multiple detection records, ...
Updating ServiceNow ticket using Splunk SOAR - problem with list field
I am trying to update an incident ticket automatically. One of the fields (u_vendor) is a list, not a simple string value, and it's not updating properly. This is the json that I am sending: {"state":"-5","u_on_hold_type":"awaiting_vendor","u_vendo...
Automatic closure of child security incidents / group security incidents
Hi, We are looking into a solution to automatically close the child security incidents when the parent security incident is already closed. We would be expecting that the child security incidents will also be closed, but currently this is not the cas...
Tenable ITSM incident rules are not triggering when vulnerability occurs in servicenow
I've created incident rules in ServiceNow to automatically generate incidents when Tenable vulnerabilities are detected. However, the rules don't seem to be triggering incidents even though the vulnerabilities are showing up correctly in ServiceNow. ...
Resolved! Custom Qualys Integration
Hi folks!Is there anybody out there that might be able to simplify an explanation, point to a more distinct document or KB article that explains the linkages of the Integration to the source integration, to the source integration, the integration par...