Enable ServiceNow

To enable the Alert Source integration, you will need the following information:

Dropzone Field

• Source
• Subdomain
  The same as the subdomain in your ServiceNow url, eg https://.service-now.com
• Username
  The username of the admin user you are using
• Password
  The password for the aforementioned user's account

To enable the Alert Source integration, do the following:

• Navigate to your Dropzone AI tenant home page e.g. https:// mycompany.dropzone.app

• In the bottom left hand corner, navigate to Settings > Integrations

• Click "Available"

• In the Search bar, search ServiceNow, then click "Configure"

• Input your subdomain, username, and password

• In the Alert queries section, input a ServiceNow encoded filter query string

• Input your desired poll interval and poll lookback

• To have the investigation results commented to each ticket, check the box under the Ticket Sync header

• Choose your desired Investigation Result Comment Type

• If you wish to further filter alerts using the Python CEL package, check the box labeled "Use advanced filtering"

• Input your CEL expression, then select whether to include or exclude alerts matching that filter. Add each filter individually using the "Add Item" button

• Contact your Dropzone AI support representative for more information about this feature

• Click "Test & Save" to finish

If you have any errors or questions, engage your Dropzone AI support representative.