SecOps - License understanding

[Geeky]

Hi Experts,

How can I track licenses in SecOps for Security Incident and Vulnerability Response ? Under Subscription Management ==> Subscriptions I see 1000 devices but unable to understand the meaning for it.

Can you please help me to understand how these devices are related to roles for SecOps and how can it be tracked?

[sachin_namjoshi]

Please contact your service now account manager to get answers for licensing related questions.

Regards,

sachin

[Geeky]

Hey common man, we can't contact sales people for everything. I have seen many people and projects provide reports and dashboards for licensing to the client. Hope to get some positive responses.

[Shiva Thomas]

Hi Geeky,

Short answer: Your subscription usage is the number of unique devices present in your SecOps tables.

Recent subscription models for SecOps are not based on the Fulfiller model, but on the Device model. You pay a small fee for every device you include in your monitored or scanned perimeter.  The per-device fee vary depending of the Tier level (in your case Professional is Tier 2) and decrease for large companies, due to quantity rebates.

"A Device is an active IP device or interface that is monitored or scanned as part of Customer’s corporate security infrastructure for which ServiceNow may receive and process security events."

Be aware that this pricing model only apply for recent contracts. Earlier Fullfillers model did cover the SecOps solution. In that case only users with roles are charged. Depending you when your instance and/or GRC subscription was signed, the licensing model can differ a lot. This is why it's a good advice to contact your ServiceNow Account Manager for such questions, as no two customers have the exact same context. (yes, its crazy!)

In your case, your Subscription is Device based, there is low doubt on that. "1000 devices" is the initial minimal starting pack. Sadly those starting pack don't calculate licence usage automatically. So, I suggest you create gauge reports to display the amount of unique present in your SecOps tables.

Additional Devices will probably be tracked in another record, where usually the platform automatically count the number of effective devices (= Allocated) vs the theoretical subscription (= Purchased). Here is an example with GRC.

There is some documentation on the Subscription Management module, but it mostly focus on usage for Fulfiller models.

∴
Best regards from Switzerland
Shiva :¬,

If this reply assisted you, please consider marking it 👍Helpful or ✅Correct.
This enables other customers to learn from your thread.

[Geeky]

Do you have any idea which table I need to consider for finding the devices?

As you said in below comments, looking for the table.

In your case, your Subscription is Device based, there is low doubt on that. "1000 devices" is the initial minimal starting pack. Sadly those starting pack don't calculate licence usage automatically. So, I suggest you create gauge reports to display the amount of unique present in your SecOps tables.