---
sourceDocument: Brazil IT Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-service-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Service Management

ft:clusterId :

    - itsm

bundleId :

    - itsm

workflow :

    - Technology


---

# Logging an incident

# Logging an incident {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Users and agents log incidents from sources such as email, the service desk, the service catalog, or external applications. Business rules and SOAP messaging can also generate incidents automatically.
{#logging-incident__table_w5s_p4x_bq__entry__2}

| Where | How |
|:-|:-|
| Service desk | Users can call a service desk agent, who logs an incident based on the information the user provides. Service desk (ITIL) agents can log an incident from the Self-ServiceIncidentsCreate New module. |
| Service catalog | Users can log an incident in the service catalog from the Self-ServiceService CatalogCan We Help You?Create Incident record producer. |
| Email | Users can send an email to the instance mailbox. Inbound email actions create an incident from the email. |
| SMS | Users can send an SMS to the ServiceNow Customer Service number, which automatically creates an incident for the user. Note: To use the messaging service, an administrator must activate the Notify plugin (com.snc.notify) and set up a Twilio account. |
| Chat window | Users can request to create an incident using the Connect chat icon that appears in the header of the instance. In the chat window, the user can add an ITIL user and also provide a short description of the issue. Based on the description, the ITIL user creates an appropriate incident. |
[Table 1. Incident logging sources]

{#logging-incident__table_w5s_p4x_bq}  
Note:  
To create a security incident, first activate the Security Incident Response Dependencies plugin (com.snc.si_dep). You can then select Create Security Incident on a new incident form to create a security incident from the currently displayed incident.  
Employee self-service (ESS) users can:

* View the incidents they have opened. By default, the Watch list, State, and Urgency fields are available on the ESS view of the Incident form.
* Update the Watch list and Short Description fields, and enter Additional comments. The administrator can configure other fields to be editable.

{#logging-incident__ul_vtc_bvq_c3b} Users who don't have the itil role can view an incident only if they're the caller, opened the incident, or are on the watch list. The incident query business rule controls this function.  
Incidents can also be generated automatically in the following ways:

* Business rules can generate incidents automatically. Business rules use JavaScript to generate an incident when predefined conditions are met.
* SOAP messaging can generate incidents from outside the platform. For details, see [SOAP messaging](https://www.servicenow.com/docs/access?context=c_DirectWebServices&version=brazil&pubname=brazil-api-reference&ft:locale=en-US).
{#logging-incident__ul_z32_q5q_c3b}

*[\>]: and then