{
"defaultIncidentType": "ServiceNow Ticket",
"description": "Maps outgoing ServiceNow incident Fields.",
"feed": false,
"fromVersion": "6.0.0",
"id": "ServiceNow-outgoing-mapper",
"mapping": {
"ServiceNow SIR Incident": {
"dontMapEventToLabels": false,
"internalMapping": {
"attack_vector": {
"complex": null,
"simple": "servicenowattackvector"
},
"business_criticality": {
"complex": {
"accessor": "",
"filters": [],
"root": "servicenowbusinessimpact",
"transformers": [
{
"args": {
"input_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1 - Critical,2 - High,3 - Non-Critical"
}
},
"mapped_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1,2,3"
}
}
},
"operator": "MapValuesTransformer"
}
]
},
"simple": ""
},
"close_notes": {
"complex": null,
"simple": "servicenowresolutionnotes"
},
"description": {
"complex": null,
"simple": "details"
},
"impact": {
"complex": {
"accessor": "",
"filters": [],
"root": "servicenowimpact",
"transformers": [
{
"args": {
"input_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "3 - Low,2 - Medium,1 - High"
}
},
"mapped_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "3,2,1"
}
}
},
"operator": "MapValuesTransformer"
}
]
},
"simple": ""
},
"priority": {
"complex": {
"accessor": "",
"filters": [],
"root": "servicenowpriority",
"transformers": [
{
"args": {
"input_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1 - Critical,2 - High,3 - Moderate,4 - Low,5 - Planning"
}
},
"mapped_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1,2,3,4,5"
}
}
},
"operator": "MapValuesTransformer"
}
]
},
"simple": ""
},
"risk_score": {
"complex": {
"accessor": "",
"filters": [],
"root": "severity",
"transformers": [
{
"args": {
"by": {
"isContext": false,
"value": {
"complex": null,
"simple": "20"
}
}
},
"operator": "multiply"
},
{
"args": {
"by": {
"isContext": false,
"value": {
"complex": null,
"simple": "1"
}
}
},
"operator": "addition"
}
]
},
"simple": ""
},
"severity": {
"complex": {
"accessor": "",
"filters": [],
"root": "servicenowseverity",
"transformers": [
{
"args": {
"input_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1 - High,2 - Medium,3 - Low"
}
},
"mapped_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1,2,3"
}
}
},
"operator": "MapValuesTransformer"
}
]
},
"simple": ""
},
"short_description": {
"complex": null,
"simple": "name"
},
"sla_due": {
"complex": {
"accessor": "",
"filters": [
[
{
"ignoreCase": false,
"left": {
"isContext": true,
"value": {
"complex": null,
"simple": "remediationsla.dueDate"
}
},
"operator": "isAfter",
"right": {
"isContext": false,
"value": {
"complex": null,
"simple": "0001-01-01T00:00:00Z"
}
}
}
]
],
"root": "remediationsla.dueDate",
"transformers": []
},
"simple": ""
},
"state": {
"complex": {
"accessor": "",
"filters": [],
"root": "servicenowsirstate",
"transformers": [
{
"args": {
"input_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "Closed,Analysis,Contain,Eradicate,Recover,Draft,Review,Cancelled"
}
},
"mapped_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "3,16,17,18,20,10,100,7"
}
}
},
"operator": "MapValuesTransformer"
}
]
},
"simple": ""
},
"urgency": {
"complex": {
"accessor": "",
"filters": [],
"root": "servicenowurgency",
"transformers": [
{
"args": {
"input_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1 - High,2 - Medium,3 - Low"
}
},
"mapped_values": {
"isContext": false,
"value": {
"complex": null,
"simple": "1,2,3"
}
}
},
"operator": "MapValuesTransformer"
}
]
},
"simple": ""
}
}
},
"ServiceNow Ticket": {
"dontMapEventToLabels": false,
"internalMapping": {
"category": {
"complex": null,
"simple": "servicenowcategory"
},
"closed_at": {
"complex": {
"accessor": "",
"filters": [
[
{
"ignoreCase": false,
"left": {
"isContext": true,
"value": {
"complex": null,
"simple": "closed"
}
},
"operator": "isAfter",
"right": {
"isContext": false,
"value": {
"complex": null,
"simple": "0001-01-01T00:00:00Z"
}
}
}
]
],
"root": "closed",
"transformers": []
},
"simple": ""
},
"description": {
"complex": null,
"simple": "details"
},
"escalation": {
"complex": null,
"simple": "servicenowescalation"
},
"impact": {
"complex": null,
"simple": "servicenowimpact"
},
"notify": {
"complex": null,
"simple": "servicenownotify"
},
"priority": {
"complex": null,
"simple": "servicenowpriority"
},
"resolved_at": {
"complex": {
"accessor": "",
"filters": [
[
{
"ignoreCase": false,
"left": {
"isContext": true,
"value": {
"complex": null,
"simple": "closed"
}
},
"operator": "isAfter",
"right": {
"isContext": false,
"value": {
"complex": null,
"simple": "0001-01-01T00:00:00Z"
}
}
}
]
],
"root": "closed",
"transformers": []
},
"simple": ""
},
"severity": {
"complex": {
"accessor": "",
"filters": [],
"root": "severity",
"transformers": [
{
"args": {
"limit": {
"isContext": false,
"value": null
},
"replaceWith": {
"isContext": false,
"value": {
"complex": null,
"simple": "3 - Low"
}
},
"toReplace": {
"isContext": false,
"value": {
"complex": null,
"simple": "0"
}
}
},
"operator": "replace"
},
{
"args": {
"limit": {
"isContext": false,
"value": null
},
"replaceWith": {
"isContext": false,
"value": {
"complex": null,
"simple": "3 - Low"
}
},
"toReplace": {
"isContext": false,
"value": {
"complex": null,
"simple": "0.5"
}
}
},
"operator": "replace"
},
{
"args": {
"limit": {
"isContext": false,
"value": null
},
"replaceWith": {
"isContext": false,
"value": {
"complex": null,
"simple": "3 - Low"
}
},
"toReplace": {
"isContext": false,
"value": {
"complex": null,
"simple": "1"
}
}
},
"operator": "replace"
},
{
"args": {
"limit": {
"isContext": false,
"value": null
},
"replaceWith": {
"isContext": false,
"value": {
"complex": null,
"simple": "2 - Medium"
}
},
"toReplace": {
"isContext": false,
"value": {
"complex": null,
"simple": "2"
}
}
},
"operator": "replace"
},
{
"args": {
"limit": {
"isContext": false,
"value": null
},
"replaceWith": {
"isContext": false,
"value": {
"complex": null,
"simple": "1 - High"
}
},
"toReplace": {
"isContext": false,
"value": {
"complex": null,
"simple": "3"
}
}
},
"operator": "replace"
},
{
"args": {
"limit": {
"isContext": false,
"value": null
},
"replaceWith": {
"isContext": false,
"value": {
"complex": null,
"simple": "1 - High"
}
},
"toReplace": {
"isContext": false,
"value": {
"complex": null,
"simple": "4"
}
}
},
"operator": "replace"
}
]
},
"simple": ""
},
"short_description": {
"complex": null,
"simple": "name"
},
"sla_due": {
"complex": null,
"simple": "remediationsla.dueDate"
},
"state": {
"complex": null,
"simple": "servicenowstate"
},
"subcategory": {
"complex": null,
"simple": "subcategory"
},
"urgency": {
"complex": null,
"simple": "servicenowurgency"
},
"work_start": {
"complex": null,
"simple": "timetoassignment.startDate"
}
}
}
},
"name": "ServiceNow - Outgoing Mapper",
"type": "mapping-outgoing",
"version": -1,
"supportedModules": [
"agentix",
"xsiam"
]
}