IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
Elastic Docs ›Kibana Guide [7.12] ›Alerting and Actions ›Actions and connectors
« Server log action Slack action »

ServiceNow actionedit

The ServiceNow action type uses the V2 Table API to create ServiceNow incidents. The ServiceNow ITSM connector can be used for rule actions and cases. The ServiceNow SecOps connector can only be used for cases.

Connector configurationedit

ServiceNow connectors have the following configuration properties.

Name
The name of the connector. The name is used to identify a connector in the Stack Management UI connector listing, and in the connector list when configuring an action.
URL
ServiceNow instance URL.
Username
Username for HTTP Basic authentication.
Password
Password for HTTP Basic authentication.

Preconfigured action typeedit

 my-servicenow:
   name: preconfigured-servicenow-action-type
   actionTypeId: .servicenow
   config:
     apiUrl: https://dev94428.service-now.com/
   secrets:
     username: testuser
     password: passwordkeystorevalue

Config defines information for the action type.

apiUrl
An address that corresponds to URL.

Secrets defines sensitive information for the action type.

username
A string that corresponds to Username.
password
A string that corresponds to Password. Should be stored in the Kibana keystore.

Action configurationedit

ServiceNow actions have the following configuration properties.

Urgency
The extent to which the incident resolution can delay.
Severity
The severity of the incident.
Impact
The effect an incident has on business. Can be measured by the number of affected users or by how critical it is to the business in question.
Short description
A short description for the incident, used for searching the contents of the knowledge base.
Description
The details about the incident.
Additional comments
Additional information for the client, such as how to troubleshoot the issue.

Configure ServiceNowedit

ServiceNow offers free Personal Developer Instances, which you can use to test incidents.

« Server log action Slack action »