Create Incident

Creates a ServiceNow incident.

External Documentation

To learn more, visit the ServiceNow documentation.

Basic Parameters

Parameter	Description
Incident Fields	A JSON map of fields to apply on the incident. "urgency"/"impact" fields may contain the values "1" (High), "2" (Medium), "3"(Low). "assigned_to" field contains the username/ID of the user that the incident will be assigned to.
Table Name	The name of the table, such as "incident" or "asset".

Advanced Parameters

Parameter	Description
Display Value	Determines the type of data returned, either the actual values from the database or the display values of the fields. Display values are manipulated based on the actual value in the database and user or system settings and preferences. Valid values: - true: Returns the display values for all fields. - false: Returns the actual values from the database. - all: Returns both actual and display values.
Exclude Reference Link	Flag that indicates whether to exclude Table API links for reference fields. Valid values: - true: Exclude Table API links for reference fields. - false: Include Table API links for reference fields.
Response Fields	Comma-separated list of fields to return in the response.
Return Display Values	Flag that indicates whether to set field values using the display value or the actual value. If selected, treats input values as display values and they are manipulated so they can be stored properly in the database. Otherwise, treats input values as actual values and stored them in the database without manipulation.
View Mode	UI view for which to render the data. Determines the fields returned in the response. If you also specify the Fields parameter, it takes precedent.

Example Output

{
    "result": {
        "parent": "",
        "made_sla": "true",
        "caused_by": "",
        "watch_list": "",
        "upon_reject": "Cancel all future Tasks",
        "sys_updated_on": "2022-12-21 04:08:52",
        "child_incidents": "0",
        "hold_reason": "",
        "origin_table": "",
        "task_effective_number": "INC0010034",
        "approval_history": "",
        "number": "INC0010034",
        "resolved_by": "",
        "sys_updated_by": "admin",
        "opened_by": {
            "display_value": "System Administrator",
            "link": "https://dev125455.service-now.com/api/now/table/sys_user/6816f79cc0a8016401c5a33be04be441"
        },
        "user_input": "",
        "sys_created_on": "2022-12-21 04:08:52",
        "sys_domain": {
            "display_value": "global",
            "link": "https://dev125455.service-now.com/api/now/table/sys_user_group/global"
        },
        "state": "In Progress",
        "route_reason": "",
        "sys_created_by": "admin",
        "knowledge": "false",
        "order": "",
        "calendar_stc": "",
        "closed_at": "",
        "cmdb_ci": "",
        "delivery_plan": "",
        "contract": "",
        "impact": "1 - High",
        "active": "true",
        "work_notes_list": "",
        "business_service": "",
        "business_impact": "",
        "priority": "1 - Critical",
        "sys_domain_path": "/",
        "rfc": "",
        "time_worked": "",
        "expected_start": "",
        "opened_at": "2022-12-21 04:08:52",
        "business_duration": "",
        "group_list": "",
        "work_end": "",
        "caller_id": "",
        "reopened_time": "",
        "resolved_at": "",
        "approval_set": "",
        "subcategory": null,
        "work_notes": "",
        "universal_request": "",
        "short_description": "Example Incident Title",
        "close_code": null,
        "correlation_display": "",
        "delivery_task": "",
        "work_start": "",
        "assignment_group": "",
        "additional_assignee_list": "",
        "business_stc": "",
        "cause": "",
        "description": "Example long description",
        "origin_id": "",
        "calendar_duration": "",
        "close_notes": "",
        "notify": "Do Not Notify",
        "service_offering": "",
        "sys_class_name": "Incident",
        "closed_by": "",
        "follow_up": "",
        "parent_incident": "",
        "sys_id": "a39da5d387f7d1105e5cfd57dabb35e5",
        "contact_type": null,
        "reopened_by": "",
        "incident_state": "In Progress",
        "urgency": "1 - High",
        "problem_id": "",
        "company": "",
        "reassignment_count": "0",
        "activity_due": "2022-12-21 06:08:52",
        "assigned_to": {
            "display_value": "System Administrator",
            "link": "https://dev125455.service-now.com/api/now/table/sys_user/6816f79cc0a8016401c5a33be04be441"
        },
        "severity": "3 - Low",
        "comments": "",
        "approval": "Not Yet Requested",
        "sla_due": "UNKNOWN",
        "comments_and_work_notes": "",
        "due_date": "",
        "sys_mod_count": "0",
        "reopen_count": "0",
        "sys_tags": "",
        "escalation": "Normal",
        "upon_approval": "Proceed to Next Task",
        "correlation_id": "",
        "location": "",
        "category": "Inquiry / Help"
    }
}

Workflow Library Example

Forcepoint Dlp on Confidential Email Alert Ask User for Reason and Request Approval

Preview this Workflow on desktop