ServiceNow Integration

ServiceNow allows you to simplify the way you work. Deliver great experiences and enhance productivity with powerful digital workflows across all areas of your business. ServiceNow is a suite of products that provided various capabilities.

Enabling this integration in Cisco XDR will make the ServiceNow API available as a target for automation workflows. This target can be used to perform tasks such as creating incidents, creating change tickets, and more.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Third-Party tab and navigate to the ServiceNow integration.

  3. Click the plus sign (+) in the lower-right corner of the card. The ServiceNow integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the ServiceNow integration in Cisco XDR.

You can perform the following tasks after you integrate ServiceNow with Cisco XDR:

  • Assets - View users or devices as reported by ServiceNow. For more information, including how to filter the view to only the reports from ServiceNow, see Devices.

  • Automation:

    • Atomic Actions - The atomic actions for ServiceNow can be used as building blocks in custom workflows. These can be found as available Actions in the left menu of the Workflow Editor. See Atomic Actions and Workflows.

    • Workflows - The workflows for ServiceNow can be installed from the Automation Exchange. See Workflows and Exchange.

    • Playbooks - An Automation system workflow that uses ServiceNow and is included in the Cisco Managed Incident Playbook can be used to Document and Notify. See Identification on the Response page.