Fortinet black logo

New Features

Use ServiceNow connector in playbooks

Copy Link
Copy Doc ID 7d55ae6f-8e83-11ec-9fd1-fa163e15d75b:708105
Download PDF

Use ServiceNow connector in playbooks

ServiceNow Connector is supported by playbooks for more automation with ServiceNow integration. Playbooks can automatically create, update or delete Incident records in ServiceNow via the connector.

The incident trigger includes update/create/delete notices when connected to ServiceNow connector. For update notices, ServiceNow will refetch that incident to update the corresponding fields mapped to ServiceNow.

Note

The ServiceNow instance must be running for the playbook to post incident change notices to the ServiceNow table. They will not post if the ServiceNow instance is hibernating.

To create the ServiceNow fabric connector:
  1. Go to Fabric View > Fabric > Connectors, and click Create New.
  2. In the ITSM category, click ServiceNow Connector.
  3. Configure the connector, and click OK.

To create a playbook using the ServiceNow fabric connector:
  1. Go to FortiSoC > Automation > Playbook, and click Create New.
  2. From the list of playbook templates, select New playbook created from scratch.

    You can also edit an existing playbook according to your needs.

  3. Click within the playbook's title fields to change its name and description.
  4. Select a trigger for the playbook.
  5. Configure the trigger's filter conditions, and click OK.
  6. Drag a highlighted connector from the trigger to add a new step in the playbook.
  7. From the list of connectors for the step, select ServiceNow.
  8. Configure the step in the playbook, and click OK.

    Name

    Type a name for the step.

    Description

    (Optional) Type a description for the step.

    Connector

    Select the ServiceNow connector that you configured.

    Action

    Select Post Incident Change Notice.

    Incident ID

    Select Playbook Starter, incident_id.

  9. Click Save Playbook.

Use ServiceNow connector in playbooks

ServiceNow Connector is supported by playbooks for more automation with ServiceNow integration. Playbooks can automatically create, update or delete Incident records in ServiceNow via the connector.

The incident trigger includes update/create/delete notices when connected to ServiceNow connector. For update notices, ServiceNow will refetch that incident to update the corresponding fields mapped to ServiceNow.

Note

The ServiceNow instance must be running for the playbook to post incident change notices to the ServiceNow table. They will not post if the ServiceNow instance is hibernating.

To create the ServiceNow fabric connector:
  1. Go to Fabric View > Fabric > Connectors, and click Create New.
  2. In the ITSM category, click ServiceNow Connector.
  3. Configure the connector, and click OK.

To create a playbook using the ServiceNow fabric connector:
  1. Go to FortiSoC > Automation > Playbook, and click Create New.
  2. From the list of playbook templates, select New playbook created from scratch.

    You can also edit an existing playbook according to your needs.

  3. Click within the playbook's title fields to change its name and description.
  4. Select a trigger for the playbook.
  5. Configure the trigger's filter conditions, and click OK.
  6. Drag a highlighted connector from the trigger to add a new step in the playbook.
  7. From the list of connectors for the step, select ServiceNow.
  8. Configure the step in the playbook, and click OK.

    Name

    Type a name for the step.

    Description

    (Optional) Type a description for the step.

    Connector

    Select the ServiceNow connector that you configured.

    Action

    Select Post Incident Change Notice.

    Incident ID

    Select Playbook Starter, incident_id.

  9. Click Save Playbook.