Demo Incident Data
Hi all ,I wanted to try task intelligence for ITSM in my PDI but the required number of incidents needed are 10k.so is there any way I can create or get some demo incidents data.Thanks,
Forum Posts
instance security hardening - glide.security.url.whitelist - need details for this system property
glide.security.url.whitelist - created this system property (snapshot attached) to check its nature of operation but turned out as a fail. When logout from the admin user or a newly created user from the PDI, its not working as expected (enforces val...
Splunk ES Integration- field mapping to a choice value on sn_si_incident
Hey all-we have a working Splunk ES integration configured previously by ServiceNow implementers- but the 'source' field is currently populating to the SNow form default of 'phone', and the secops folks want it adjusted to SIEM. instead of changing ...
Resolved! Mass close Remediation Tasks
Hi all, We have around 62000 remediation tasks which all need to be closed. I first tried using "update all" to update their "state" values to "closed completed." However, this times out and only closes around 3000 records before timing out. So next,...
Risk calculator doesn't work
Hi, I have a second question related to risk calculator.As per my understanding and the knowledge I have from community, when a new Vulnerable item got created (from integration), a Business rule "Calculate risk score" got executed and the risk ratin...
Resolved! Vulnerability Response - Remediation Task Rules issue
Hi We have one Remediation Task rule which will create a Remediation Task for an assignment group as long as that assignment group is not empty on the VIT. We have had some issues where the wrong team has been assigned so these VIT's have been manual...
Splunk integration plugin to create Security Incidents vs. just using Event Management
Hi, team, a large customer is challenging me on the technical and business benefits of the Splunk plugin vs. just using event management to create security incidents. Anyone have any concrete evidence that the plugin is "better?"
Resolved! Tenable.io plugin import and severity field in VR
I have a fully working vulnerability response integration with tenable.io. We have a requirement to switch from CVSS 2.0 to CVSS 3.0 for severity calculation. We had changed the settings in Tenable.io from using CVSS 2.0 to CVSS 3.0 for severity and ...
How to install Major Security Incident plugin on PDI
Hi All, I am not able to install Major Security Incident Plugin on my PDI because one of dependent plugin (sn_sp_spoke) needs to be purchased from ServiceNow Store If any one knows how to fix this issue then please help me.
How do I ensure that Outdated Libraries are not used?
How do I ensure that Outdated Libraries are not used? For TinyMC the library TinyMCE version 4.4.3 was being used and has known security issues. The newest version is 5.2.2 (30.04.2020). For Jquery the library jQuery version 2.2.3-snc was being used ...
Resolved! Updating Splunk Notable Event from Servicenow
Hi Champs, I am trying to make a connection to splunk to update the notable event, but getting 400 error. Kindly suggest. Error screenshot below:
Vulnerability Detections Process
Hi, I would like to know the vulnerability detection process. When we integrate with third party applications like Qualys. We will receive data in detection table and from there VIT's will be created. So I would like to know1) how the detections are ...
How do I authenticate to a TAXII Discovery Service endpoint?
I've built a TAXII profile but the discovery server requires a username and password of guest/guest. I'm not sure how to build the REST message to send that. When I test connecting to the TAXII server manually with the username and password using Cab...
Required API Permissions/Roles on a Microsoft Azure application
In the DLP documentationhttps://docs.servicenow.com/bundle/utah-security-management/page/product/dlp-microsoft/reference/getting-started-microsoft-integration.html Under the heading 'Required API Permissions/Roles on a Microsoft Azure application' it...
False positive vulnerable items reopened
Hi, I have questions regarding the false positive vulnerabilities. Please see below1) Does false positive vulnerabilities reopened from source scanners (Qualys, Rapid7)? 2) Once vulnerabilities are marked as false positive what are the options to reo...