---
sourceDocument: Australia Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Security Operations Integrations - Get Network Statistics flow

# Security Operations Integrations - Get Network Statistics flow {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The Security Operations Integrations - Get Network Statistics flow retrieves a list of active network connections from a host or endpoint.

## Before you begin

Role required: sn_si.analyst

## About this task

This flow runs automatically when a configuration item is added to a security incident.
Figure 1. Get Network Statistics

Actions specific to this flow are described here. For more information on other actions, see [Common Security Operations integration flows and orchestration activities](https://www.servicenow.com/docs/VeHrUh9NzKmFfa~3wxWcqQ "Many of the flows associated with third-party integrations include the same activities. For example, activities for beginning and completing processing.").  
The flow actions include:

* [Capability - Determine CIs activity](https://www.servicenow.com/docs/k21l3QFCU9WFMgt14Xd3ZA "The Capability - Determine CIs workflow activity determines which configuration items (CIs) to include in the workflow.")
* 
{#secops-integration-get-network-stats-workflow__ul_lf2_jwb_3cc} .
* **[Legacy: Execution Tracking - Begin (CIs) Flow Action](https://www.servicenow.com/docs/km6zEwwRv_t2iYF6c9oEJQ)**   
  The Execution Tracking - Begin (CIs) flow action starts the auditing process for a Security Operations Integration flow that operates on configuration items (CIs).