Create Incident
Creates a ServiceNow incident.
External Documentation
To learn more, visit the ServiceNow documentation.
Basic Parameters
Parameter | Description |
---|---|
Incident Fields | A JSON map of fields to apply on the incident. "urgency"/"impact" fields may contain the values "1" (High), "2" (Medium), "3"(Low). "assigned_to" field contains the username/ID of the user that the incident will be assigned to. |
Table Name | The name of the table, such as "incident" or "asset". |
Advanced Parameters
Parameter | Description |
---|---|
Display Value | Determines the type of data returned, either the actual values from the database or the display values of the fields. Display values are manipulated based on the actual value in the database and user or system settings and preferences. Valid values: - true: Returns the display values for all fields. - false: Returns the actual values from the database. - all: Returns both actual and display values. |
Exclude Reference Link | Flag that indicates whether to exclude Table API links for reference fields. Valid values: - true: Exclude Table API links for reference fields. - false: Include Table API links for reference fields. |
Response Fields | Comma-separated list of fields to return in the response. |
Return Display Values | Flag that indicates whether to set field values using the display value or the actual value. If selected, treats input values as display values and they are manipulated so they can be stored properly in the database. Otherwise, treats input values as actual values and stored them in the database without manipulation. |
View Mode | UI view for which to render the data. Determines the fields returned in the response. If you also specify the Fields parameter, it takes precedent. |
Example Output
{
"result": {
"parent": "",
"made_sla": "true",
"caused_by": "",
"watch_list": "",
"upon_reject": "Cancel all future Tasks",
"sys_updated_on": "2022-12-21 04:08:52",
"child_incidents": "0",
"hold_reason": "",
"origin_table": "",
"task_effective_number": "INC0010034",
"approval_history": "",
"number": "INC0010034",
"resolved_by": "",
"sys_updated_by": "admin",
"opened_by": {
"display_value": "System Administrator",
"link": "https://dev125455.service-now.com/api/now/table/sys_user/6816f79cc0a8016401c5a33be04be441"
},
"user_input": "",
"sys_created_on": "2022-12-21 04:08:52",
"sys_domain": {
"display_value": "global",
"link": "https://dev125455.service-now.com/api/now/table/sys_user_group/global"
},
"state": "In Progress",
"route_reason": "",
"sys_created_by": "admin",
"knowledge": "false",
"order": "",
"calendar_stc": "",
"closed_at": "",
"cmdb_ci": "",
"delivery_plan": "",
"contract": "",
"impact": "1 - High",
"active": "true",
"work_notes_list": "",
"business_service": "",
"business_impact": "",
"priority": "1 - Critical",
"sys_domain_path": "/",
"rfc": "",
"time_worked": "",
"expected_start": "",
"opened_at": "2022-12-21 04:08:52",
"business_duration": "",
"group_list": "",
"work_end": "",
"caller_id": "",
"reopened_time": "",
"resolved_at": "",
"approval_set": "",
"subcategory": null,
"work_notes": "",
"universal_request": "",
"short_description": "Example Incident Title",
"close_code": null,
"correlation_display": "",
"delivery_task": "",
"work_start": "",
"assignment_group": "",
"additional_assignee_list": "",
"business_stc": "",
"cause": "",
"description": "Example long description",
"origin_id": "",
"calendar_duration": "",
"close_notes": "",
"notify": "Do Not Notify",
"service_offering": "",
"sys_class_name": "Incident",
"closed_by": "",
"follow_up": "",
"parent_incident": "",
"sys_id": "a39da5d387f7d1105e5cfd57dabb35e5",
"contact_type": null,
"reopened_by": "",
"incident_state": "In Progress",
"urgency": "1 - High",
"problem_id": "",
"company": "",
"reassignment_count": "0",
"activity_due": "2022-12-21 06:08:52",
"assigned_to": {
"display_value": "System Administrator",
"link": "https://dev125455.service-now.com/api/now/table/sys_user/6816f79cc0a8016401c5a33be04be441"
},
"severity": "3 - Low",
"comments": "",
"approval": "Not Yet Requested",
"sla_due": "UNKNOWN",
"comments_and_work_notes": "",
"due_date": "",
"sys_mod_count": "0",
"reopen_count": "0",
"sys_tags": "",
"escalation": "Normal",
"upon_approval": "Proceed to Next Task",
"correlation_id": "",
"location": "",
"category": "Inquiry / Help"
}
}
Workflow Library Example
Forcepoint Dlp on Confidential Email Alert Ask User for Reason and Request Approval