ServiceNow integration with QRADAR
I need all the detail about how to configure integration between ServiceNow and QRADAR (IBM). Please provide the specifics of steps after the QRADAR plugin is installed. Thanks for all the help.
Forum Posts
New NowLearning Course Alert: Security Posture Control Implementation Bootcamp
Exiciting Announcement: Introducing our latest course - "Security Posture Control Implementation Bootcamp On Demand" Are you ready to take your ServiceNow® Security Operations skills to the next level? We're thrilled to unveil our newest course, ...
Resolved! Exception Questionnaire
I am wondering how the Exception Questionnaire in Vulnerability Response is useful for approvers/where the answers can be found? I know the metric results and assessment instance questions are linked to the state change approval record, but they aren...
Resolved! machine_filter on Vulnerability response Microsoft TVM
Im trying to apply a machine_filter for importing machines from Microsoft TVM in VR. The filters the machines being imported as CIs, but doesn not filter the vulnerabilities on machines, so we end up with a lot of vulnerabilities that we do not want ...
Deactivate or delete a Remediation Effort?
Could someone please guide me on how I can "delete" or "deactivate" a Remediation Effort? It seems according to ACLs, no one can delete an effort, even Admins. But it appears there should be a way to deactivate one, but it is all grayed out. Are th...
Best solution for VITs with multiple locations of vulnerabilities
We have various VITs, like for QID-106032 (Apache Log4j 1.X Detected), where in the results there are a dozen or two locations of Log4j jar files. In these instances, each of those locations in owned by a separate application team. Is there a way to...
Resolved! Adding new states to Security Incidents
Got a request in to add new States into Security Incidents. I've been looking to try and add these, but while I can add them to the Choice List, they will not appear in the drop down at any point. Also can't see to add anything to the Process Flow as...
How is the 'Vulnerable Item.Last Found' field supposed to be populated from Qualys, especially with multiple Detection Records?
Hi, We use Qualys integration with Vulnerability Response and have used the Vulnerable Item.Last Found field to determine the last time a vulnerability was found on the vulnerable item. However, if the Vulnerable Item has multiple detection records, ...
Updating ServiceNow ticket using Splunk SOAR - problem with list field
I am trying to update an incident ticket automatically. One of the fields (u_vendor) is a list, not a simple string value, and it's not updating properly. This is the json that I am sending: {"state":"-5","u_on_hold_type":"awaiting_vendor","u_vendo...
Automatic closure of child security incidents / group security incidents
Hi, We are looking into a solution to automatically close the child security incidents when the parent security incident is already closed. We would be expecting that the child security incidents will also be closed, but currently this is not the cas...
Tenable ITSM incident rules are not triggering when vulnerability occurs in servicenow
I've created incident rules in ServiceNow to automatically generate incidents when Tenable vulnerabilities are detected. However, the rules don't seem to be triggering incidents even though the vulnerabilities are showing up correctly in ServiceNow. ...
Resolved! Custom Qualys Integration
Hi folks!Is there anybody out there that might be able to simplify an explanation, point to a more distinct document or KB article that explains the linkages of the Integration to the source integration, to the source integration, the integration par...
Resolved! Unable to create SLA definition for Security Request (sn_si_request) table
Hi all, Due to this thread not being able to resolve my problem, I was advised to create a new thread entirely. So if it helps, here it is. The problem: I'm in the Security Incident Response scope trying to create an SLA (OLA actually) definition fo...
what is Stale Vulnerable Item？
Based on which field is Stale Vulnerable Item used to determine whether it is Stale ?
Resolved! Filter PA Scorecard on a breakdown, and honor the Target for the indicator
Hi folks,I have modified my first PA List widget with a Scorecard visualization, and I am struggling with a couple things on it. Hoping somebody can direct me with pointers to get what I'd like or at least to the right documents that explain it. I ...
