finding_servicenow_tickets

Creates, updates, deletes, gets or lists a finding_servicenow_tickets resource.

Overview

Name	finding_servicenow_tickets
Type	Resource
Id	datadog.security.finding_servicenow_tickets

Fields

The following fields are returned by SELECT queries:

SELECT not supported for this resource, use SHOW METHODS to view available operations for the resource.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
create_service_now_tickets	insert	data		Create ServiceNow tickets for security findings.<br />This operation creates a case in Datadog and a ServiceNow ticket linked to that case for bidirectional sync between Datadog and ServiceNow. You can create up to 50 ServiceNow tickets per request and associate up to 50 security findings per ServiceNow ticket. Security findings that are already attached to another ServiceNow ticket will be detached from their previous ServiceNow ticket and attached to the newly created ServiceNow ticket.
attach_service_now_ticket	update	data		Attach security findings to a ServiceNow ticket by providing the ServiceNow ticket URL.<br />You can attach up to 50 security findings per ServiceNow ticket. If the ServiceNow ticket is not linked to any case, this operation will create a case for the security findings and link the ServiceNow ticket to the newly created case. Security findings that are already attached to another ServiceNow ticket will be detached from their previous ServiceNow ticket and attached to the specified ServiceNow ticket.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
site	string	The Datadog site (region) for your organization, for example datadoghq.com, us3.datadoghq.com, us5.datadoghq.com, ap1.datadoghq.com, ap2.datadoghq.com, datadoghq.eu, ddog-gov.com. Resolved from the DD_SITE environment variable when set. Optional: defaults to datadoghq.com, or the value of the DD_SITE environment variable when set; a WHERE value overrides both.

INSERT examples

create_service_now_tickets

Create ServiceNow tickets for security findings.<br />This operation creates a case in Datadog and a ServiceNow ticket linked to that case for bidirectional sync between Datadog and ServiceNow. You can create up to 50 ServiceNow tickets per request and associate up to 50 security findings per ServiceNow ticket. Security findings that are already attached to another ServiceNow ticket will be detached from their previous ServiceNow ticket and attached to the newly created ServiceNow ticket.

INSERT INTO datadog.security.finding_servicenow_tickets (
data
)
SELECT 
'{{ data }}' /* required */
RETURNING
data
;

Manifest

# Description fields are for documentation purposes
- name: finding_servicenow_tickets
props:
  - name: data
    description: |
      Array of ServiceNow ticket creation request data objects.
    value:
      - attributes:
          assignee_id: "{{ assignee_id }}"
          description: "{{ description }}"
          priority: "{{ priority }}"
          title: "{{ title }}"
        relationships:
          findings:
            data:
              - id: "{{ id }}"
                type: "{{ type }}"
          project:
            data:
              id: "{{ id }}"
              type: "{{ type }}"
        type: "{{ type }}"

UPDATE examples

attach_service_now_ticket

Attach security findings to a ServiceNow ticket by providing the ServiceNow ticket URL.<br />You can attach up to 50 security findings per ServiceNow ticket. If the ServiceNow ticket is not linked to any case, this operation will create a case for the security findings and link the ServiceNow ticket to the newly created case. Security findings that are already attached to another ServiceNow ticket will be detached from their previous ServiceNow ticket and attached to the specified ServiceNow ticket.

UPDATE datadog.security.finding_servicenow_tickets
SET 
data = '{{ data }}'
WHERE 
data = '{{ data }}' --required
RETURNING
data;