Utilize Chariot’s continuous monitoring capabilities to identify and address potential security Risks and feed that critical data into ServiceNow’s incident and problem management workflows.
In order to integrate Chariot with ServiceNow, you must set up ServiceNow to receive a POST request from the Chariot webhook. We recommend setting up a Scripted REST API . Learn more about ServiceNow Scripted REST API here.
When you create your REST API, copy your ServiceNow API URL--you will add this to Chariot at the ServiceNow Setup page.
You will also need the Basic Authorization Token for the ServiceNow REST API you set up. You will add this Token to Chariot so that Chariot can authenticate the POST request with the ServiceNow API.
From the Chariot side, the essential elements of information to work with in getting your ServiceNow integration set are:
- The Risk payload structure
- The minimum severity of Risks you want Chariot to send to ServiceNow
The Risk payload is a JSON like this example:
{
"dns": "public-facing-api.domain.com",
"name": "192.168.15.30",
"finding": "exposed-administration-interface",
"source": "webhook"
}
When you choose the minimum level of Risk severity to send to ServiceNow (Info, Low, Medium, High, Critical), Chariot will send one POST request per Risk to the ServiceNow REST API you have set up.
Now Risks found by Chariot automatically show up in your ServiceNow workflow for streamlined remediation.
We hope this documentation has been helpful.
If you find a topic that you would like discussed in detail, or need further assistance, please let us know at support@praetorian.com!