Plugins or applications installed with ITOM AIOps

  • Release version: Zurich
  • Updated July 31, 2025
  • 9 minutes to read
  • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Plugins or applications installed with ITOM AIOps

    This content details the various plugins and applications installed with ITOM AIOps on the ServiceNow Zurich release. It describes the components installed with key ITOM AIOps modules such as Event Management, Health Log Analytics, Service Reliability Management, Service Operations Workspace ITOM Apps, Metric Intelligence, Agent Client Collector, Security Incident Response, and Service Observability. The information helps ServiceNow customers understand the dependencies and capabilities enabled through these plugins, facilitating deployment, update planning, and feature utilization.

    Show full answer Show less

    Event Management

    • Alert Management Content: Provides base subflows for alert remediation.
    • ITOM Licensing: Manages ITOM subscription usage and licensing.
    • Mid Web Server: Enables REST API development to send events and metrics to MID Server and facilitates communication with Agent Client Collector.
    • Service Analytics: Offers alert analytics using machine learning and topology learning.
    • Event Management and Service Mapping Core: Supplies common components for Event Management and Service Mapping.
    • Tag Based Alert Clustering Engine: Zero-code alert grouping and correlation without CMDB or model training.
    • Alert Rules Management: Automates alert responses based on defined rules.

    Health Log Analytics

    • Integration Commons for CMDB: Utility functions for processing key CMDB attributes across certified integrations.
    • ITOM Cloud Services Core: Automates data transmission from customer infrastructure using Hermes Messaging Service.
    • Service Operations Workspace ITOM Apps: Configurable workspace for managing alert lifecycles with automated recommendations and clear UI.
    • Health Log Analytics Core: Essential components for health log analytics.
    • Microsoft Teams and Slack Spokes: Enable automation of messaging and notifications for incidents and problems to respective collaboration channels.
    • Normalization Data Services Client: Maintains consistent standard company names for records.

    Service Reliability Management

    • SRM Common: Core utilities and configuration for managing teams, services, and metrics.
    • SRM Global Dependencies: Scripts and utilities supporting Service Operations Workspace SRM features.
    • Event Management: Identifies health issues with intelligent event and alert processing.
    • Service Operations Workspace ITOM Apps: Unified experience for ITOM workflows and alert lifecycle management.
    • On-Call Scheduling: Supports creation of schedules and escalation for incident routing.
    • Alert Automation: Allows operators to create and manage alert automation to enrich and process alerts.
    • Service Level Objective Management: Monitors service health via SLIs, SLOs, and error budgets.

    Service Operations Workspace ITOM Apps

    • Workspace Core: Core workspace configurations and capabilities.
    • Event Management Core: Enables alert tracking and monitoring within ServiceNow Agent Workspace.
    • Integrations Launchpad: Centralized management of ITOM AIOps integrations.
    • Alert Management: Detailed alert record pages with context and playbooks.
    • Express List: Centralized alert triage platform with live views, filtering, and automated analysis.
    • Log Analytics: Log viewer integrated into workspace with custom Elasticsearch data sources.
    • AIOps Dashboards: Visualizations for KPIs, service health, and operational insights for ITOM personas.
    • Event Management Connectors: Predefined connectors for ingesting events from third-party tools.
    • UI Components: Shared internal UI components repository.

    Metric Intelligence

    • Includes plugins for health monitoring of Metric Intelligence components on MID Server, UI functionality, and anomaly detection capabilities.
    • Uses MetricBase to store raw metric data and perform anomaly model fitting.
    • Integrates with Event Management for alert processing and root cause analysis.
    • Supports distributed MID Server cluster management for metrics.

    Agent Client Collector

    • Framework and Utilities: Supports management of agents, cross-scope transactions, and MID Server communication.
    • Monitoring Plugins: Enable monitoring of configuration items with predefined checks and enhanced metric exploration.
    • Visibility Content: Provides infrastructure discovery and SAM metrics collection to support Discovery and Digital End-User Experience applications.
    • Log Analytics: Facilitates real-time log data ingestion and correlation for proactive IT issue prediction.
    • Security Incident Response: Manages and automates security incident lifecycles with analytics dashboards

    Tables that list the plugins or applications that are installed with ITOM AIOps applications. When you update your application, any newly required application dependencies are installed.

    Event Management

    Table 1. Plugins or applications installed with Event Management (com.glideapp.itom.snac)
    Plugin or application name Description
    Alert Management Content (com.em-alert-mgmt-content) Contains all the necessary base system subflows that can be used for alert remediation.
    ITOM Licensing (com.snc.itom.license) Central components for the ITOM Licensing Model, which calculates and displays how many subscriptions for ITOM applications your organization purchases and consumes.
    Mid Web Server (com.snc.sa.mid.webserver) A MID Server extension that enables developing REST APIs to send events and metrics to the MID Server. The plugin also enables the communication between the MID Server and Agent Client Collector.
    Service Analytics (com.snc.sa.analytics) Provides alert analytics based on machine learning (ML) and topology learning.
    Event Management and Service Mapping Core (com.snc.service-watch) Comprises the common components of Event Management and Service Mapping.
    Tag Based Alert Clustering Engine (sn_em_tbac) Provides a zero-code method that helps simplify alert grouping and performs alert correlation without the need for CMDB, model training, or fine-tuning.
    Alert Rules Management (sn_em_arm) Enables Event Management users to respond automatically to alerts. An alert management rule determines the required alert response.

    Health Log Analytics

    Table 2. Plugins or applications installed with Health Log Analytics (sn_occ)
    Plugin or application name Description
    Integration Commons for CMDB (sn_cmdb_int_util) Contains a collection of utility functions that provide a common methodology for the processing of key CMDB attributes and is available to all CMDB certified integrations.
    ITOM Cloud Services Core (sn_itom_cloud_svc) Generates relevant topics for tenants, enabling them to transmit data from their customer infrastructure to ServiceNow automatically. These topics are predominantly intended for use with the Hermes Messaging Service.
    Service Operations Workspace ITOM Apps (sn_sow_itom_cont) A configurable workspace that provides a unified experience for multiple IT Operations Management workflows. You can manage the life cycle of alerts in IT Operations Management workflows through simple, intuitive, and clear user interface, automated recommendations, and targeted experience.
    Health Log Analytics Core (com.glideapp.itom.occultus) Essential components for the Health Log Analytics scoped application.
    Microsoft Teams Spoke for ServiceNow IntegrationHub (com.sn.ms_teams.ah) Provides actions that a process analyst can use when designing flows to automate sending messages about ServiceNow incident and problem records to a Microsoft Teams channel.
    Slack Webhooks Spoke for ServiceNow IntegrationHub (com.sn.slack.ah) Use Slack webhooks to post messages and record details for ServiceNow incidents, problems, and changes to Slack channels.
    Normalization Data Services Client (com.glide.data_services_canonicalization.client) Helps maintain consistency by checking that records for a given company match the list of standard company names. If the plugin finds a company-name field with a variant of that name, it substitutes the standard name in its place.

    Service Reliability Management

    Table 3. Plugins or applications installed with Service Reliability Management (sn_sow_srm)
    Plugin or application name Description
    Service Operations Workspace Service Reliability Management (SRM) Common (sn_sow_srm_common) Delivers common utilities and configuration settings used by Service Reliability Management such as core functionality related to managing teams and services, and metric calculation for services.
    Service Reliability Management (Global dependencies) (com.snc.srm) Supports global scripts and utilities for Service Reliability Management for Service Operations Workspace.
    Event Management (com.glideapp.itom.snac) Helps you to identify health issues across business services and infrastructure on a single management console. Event Management provides intelligent event and alert processing, including automatic alert remediation, aggregation, and root cause analysis (RCA)
    Service Operations Workspace ITOM Apps (sn_sow_itom_cont) A configurable workspace that provides a unified experience for multiple IT Operations Management workflows. You can manage the life cycle of alerts in IT Operations Management workflows through simple, intuitive, and clear user interface, automated recommendations, and targeted experience.
    On-Call Scheduling (com.snc.on_call_rotation) Provides the ability to create on-call schedules and escalation trees. When an incident is created, you can dynamically route the escalation to an on-call resource.
    SOW - Alert Automation (sn_sow_alert_rules) Provides operators in Service Operations Workspace with the ability to create and manage alert automation for their team. This automation can be used to enrich, process, and group alerts.
    Service Level Objective Management for Service Operations Workspace (sn_sow_slo) Includes features to monitor and manage service health using Service Level Indicators (SLIs), Service Level Objectives (SLOs), and error budgets.

    Service Operations Workspace for ITOM

    Table 4. Plugins or applications installed with Service Operations Workspace ITOM Apps (sn_sow_itom_cont)
    Plugin or application name Description
    Service Operations Workspace Core (sn_sow) Core capabilities and workspace configurations for Service Operations Workspace.
    Event Management Core (sn_em_ai) Enables you to track and monitor alerts in the ServiceNow Agent Workspace.
    Service Operations Workspace Integrations launchpad (sn_itom_integ_app) Provides a new and enhanced experience for viewing, configuring, and managing all your available ITOM AIOps integrations.
    Service Operations Workspace Alert Mngmt (sn_sow_em) A detailed alert record page with supplementary data such as Quick Overview, Playbook, and Metrics tabs.
    Service Operations Workspace Express List (sn_itom_aiops_list) A centralized and consolidated platform that enables operators to triage, analyze, and remediate alerts, all in one place. Express List provides a live view of alerts, dynamic filtering, a preview panel with additional context and essential details about each alert, and automated technical analysis using Now Assist.
    Service Operations Workspace Log Analytics (sn_sow_hla) A log viewer in Service Operations Workspace. The application also includes the custom Elasticsearch data source for Performance Analytics (PA) dashboards.
    AIOps Dashboards (sn_aiops_dashboard) Offers comprehensive visualizations of critical operational data and actionable insights that facilitate proactive responses to potential issues. The application targets multiple ITOM personas with different needs, enabling you to monitor key performance indicators (KPIs), track service health, and gain valuable context on the overall IT environment.
    Event Management Connectors (sn_em_connector) A collection of predefined interfaces (connectors) for ingesting events from third-party monitoring tools or Agent Client Collector into a ServiceNow instance.
    Service Operations Workspace UI Components (sn_itom_uib_comp) A joined repository for holding common internal UI components.

    Metric Intelligence

    Table 5. Plugins activated with Metric Intelligence (com.snc.sa.metric)
    Plugin name Description
    Operational Intelligence - Extension Health Monitoring (com.snc.sa.metric.health) Contains some features that enable self-monitoring capabilities for the Metric Intelligence components in the MID Server.
    Highcharts Reporting (com.glide.highcharts) Provides some UI functionality to Metric Intelligence.
    Event Management (com.glideapp.itom.snac) Helps you to identify health issues across business services and infrastructure on a single management console. Event Management provides intelligent event and alert processing, including automatic alert remediation, aggregation, and root cause analysis (RCA)
    ITOM UI Components (com.snc.itom.ui) Shared UI components for ITOM products that provide some UI functionality to Metric Intelligence.
    MID Server Distributed Cluster (com.snc.agent.distributed.cluster) Enables management of the mid cache component of Metric Intelligence from the ServiceNow instance.
    List v3 Components (com.glide.ui.list_v3_components) Provides some UI functionality to Metric Intelligence and components required for List v3, including REST endpoints, directives, and templates.
    MetricBase (com.snc.clotho) The database where the raw metric data such as CPU usage and Disk Free is saved and where model fitting for anomaly detection occurs.
    Mid Web Server (com.snc.sa.mid.webserver) A MID Server extension that enables developing REST APIs to send events and metrics to the MID Server. The plugin also enables the communication between the MID Server and Agent Client Collector.

    Agent Client Collector

    Table 6. Plugins or applications installed with Agent Client Collector Framework (sn_agent)
    Plugin or application name Description
    Agent Client Collector Global Utilities (com.snc.sa.accutils) A set of globally scoped utilities that facilitates cross-scope transactions between Agent Client Collector Framework and a ServiceNow instance.
    Configuration Management For Scoped Apps (CMDB) (com.snc.cmdb.scoped) Provides scoped applications with access to Identification Engine APIs.
    Mid Web Server (com.snc.sa.mid.webserver) A MID Server extension that enables developing REST APIs to send events and metrics to the MID Server. The plugin also enables the communication between the MID Server and Agent Client Collector.
    Table 7. Plugins or applications installed with Agent Client Collector Monitoring (sn_itmon)
    Plugin or application name Description
    Agent Client Collector Framework (sn_agent) Manages Agent Client Collector on the ServiceNow instance and the MID Server.
    Metric Intelligence (sn_metrics_ng) A companion application to the family Metric Intelligence plugin that provides additional functionality and enhancements.
    Service Operations Workspace Metric Explorer (sn_itom_metric_exp) Enables operators to investigate metric behavior and compare and correlate different metrics across hosts, applications, and services so they can troubleshoot issues and find the root cause.
    Event Management (com.glideapp.itom.snac) Helps you to identify health issues across business services and infrastructure on a single management console. Event Management provides intelligent event and alert processing, including automatic alert remediation, aggregation, and root cause analysis (RCA)
    Metric Intelligence (com.snc.sa.metric) Provides the ability to capture, explore and analyze application metrics data, identifying and indicating anomalies. Metric Intelligence generates anomaly alerts, which can be promoted to IT alerts and appear on the Service Operations Workspace and Service Health dashboard.
    Table 8. Plugins or applications installed with Agent Client Collector for Visibility - Content (sn_acc_visibility)
    Plugin or application name Description
    Agent Client Collector for Visibility - Content Content (sn_acc_vis_content) Provides agent-based infrastructure discovery and collects Software Asset Management (SAM) metrics to support Discovery and Digital End-User Experience (DEX) applications.
    Discovery (com.snc.discovery) Finds applications and devices on your network, and then updates the CMDB with the information it finds.
    Agent Client Collector Framework (sn_agent) Manages Agent Client Collector on the ServiceNow instance and the MID Server.
    CMDB CI Class Models (sn_cmdb_ci_class) Adds class models that extend the CMDB class hierarchy, including class descriptions, identification rules, identifier entries, and dependent relationships if applicable. Applications such as Discovery and Service Mapping can use these class extensions to populate configuration items (CIs) and discover various technologies and software.
    Table 9. Applications installed with Agent Client Collector Log Analytics (sn_accl)
    Application name Description
    Agent Client Collector Monitoring (sn_itmon) Provides the ability to monitor your configuration items (CIs). This application comes with predefined monitoring checks and policies that are applied on the agent.
    Health Log Analytics (sn_occ) Helps you solve issues faster by ingesting, analyzing, and correlating machine-generated log data in real-time to predict IT issues before they affect you.
    Table 10. Plugins or applications installed with Agent Client Collector Security Incident Response (sn_secops_acc)
    Plugin or application name Description
    Security Incident Response (sn_si) Enables you to manage and automate the life cycle of your security incidents from initial prioritization to containment and resolution. Use the automated workflows to respond quickly and consistently, and understand trends and bottlenecks through the data provided by analytics-driven dashboards and comprehensive reporting systems.
    Security Support Orchestration (sn_sec_cmn_orch) Dependency for the Vulnerability Response and Security Incident Response applications.
    Threat Intelligence Support Common (sn_ti) Enables you to find Indicators of Compromise (IoCs) and enrich security incidents with threat intelligence data. Threat Intelligence enables you to access and provide a reference point for your company's Structured Threat Information Expression (STIX) data.
    Agent Client Collector Spoke (sn_acc_spoke) Provides a framework to write customized workflows or automations to execute on agents or CIs.
    Security Support Core (com.snc.security_support.core) Provides a robust core data model and UI framework specifically for security operations integrations. This comprehensive model serves as the backbone for seamlessly integrating various security tools and systems, promoting smooth data flow and efficient operations.
    Security Support Common (sn_sec_cmn) Enables core functionality used by the Security Operations applications.
    Security Integration Framework (sn_sec_int) Manages the common functionality for Security Operations integrations including both Security Incident Response and Vulnerability Response. Security Integration Framework enables you to use existing features and functionality without having to reimplement them.
    Agent Client Collector Framework (sn_agent) Manages Agent Client Collector on the ServiceNow instance and the MID Server.
    Vulnerability Response Dependencies (com.snc.si_dep) Activates all the dependent plugins required to support the Vulnerability Response application.

    Service Observability

    Table 11. Plugins or applications installed with Service Observability (sn_service_obs)
    Plugin or application name Description
    Service Observability UI (sn_service_obs_ui) Enables you to use Service Observability in the Service Operations Workspace (SOW) and the SOW Admin Center.
    Service Reliability Management (sn_sow_srm) Service Reliability Management and Service Observability display service performance metrics together to give a holistic view into service health.
    Platform Analytics (sn_app_analytics_w) Enables customizing the dashboards.