Forum Discussion

btipton1960's avatar
btipton1960
Copper Contributor
Apr 12, 2024

Event Management

Does Sentinel have the ability to apply business rules to an event which would determine whether an Incident ticket in ServiceNow via the bi-directional API?

SIEM
  • Clive_Watson's avatar
    Clive_Watson
    Bronze Contributor
    Apr 16, 2024
    Can you give some more details please? You can assign an Automation Rule to a created or updated Incident - from that you could set a Tag or status change that Service Now could react to. Comments can also be used, so you could fire a Automation Rule that calls a Playbook that sets the comment in the Incident, Service Now can then react to those and maybe update the comment when done?

Share

Resources