====== ServiceNow Event Manager ====== ==== Purpose ==== * This plugin sends alarms and metrics from the Collector to the ServiceNow Event Management module. * Once active, it collects all generated alerts and metrics and regularly posts them to ServiceNow via REST API. * Alarms are sent as ServiceNow EM events, metrics are sent as metric events. * It is possible to define several plugins, for example if a secondary collector is in place. {{..:plugins:servicenowem.png?700|}} ==== Configuration ==== * From the plugin menu, select "ServiceNow Event Management" type and click on "Add" to create a new plugin. This will open the plugin configuration screen. * Fill the plugin settings form: * **Enabled:** Enable or disable the plugin * **Name:** The plugin display name * **User:** ServiceNow API user * **Password:** ServiceNow API password * **ServiceNow Instance URL:** The base URL of the ServiceNow instance * **Config API URL:** REST endpoint used to push configuration items to the CMDB (Leave empty to use the default) * **Events API URL:** REST endpoint used to send alarm events (Leave empty to use the default) * **Metrics API URL:** REST endpoint used to send metric events (Leave empty to use the default) * **Chunk size:** Maximum number of alerts or metrics sent per HTTP request ==== How it works ==== * The plugin registers as a listener on both the alarm and metric pipelines. * Alarms and metrics are buffered internally (up to 50,000 items each). * Every 30 seconds, the plugin flushes the buffers and sends the data in chunks to ServiceNow. * Each alarm is mapped to a ServiceNow EM event with the following severity mapping: ^ RedPeaks Severity ^ ServiceNow EM Severity ^ | CRITICAL | 1 (Critical) | | MAJOR | 2 (Major) | | MINOR | 3 (Minor) | | WARNING | 4 (Warning) | | INFO | 5 (OK) | | CLEAR | 0 (Clear) | * If the Config API URL is set, the plugin also pushes SAP system metadata to the ServiceNow CMDB, allowing EM events to be linked to the correct Configuration Items (CI) ==== Test Connection ==== * Use the **test button** (flask icon) to verify that the Collector can reach the ServiceNow instance with the provided credentials