{
    "defaultIncidentType": "ServiceNow Ticket",
    "description": "Maps outgoing ServiceNow incident Fields.",
    "feed": false,
    "fromVersion": "6.0.0",
    "id": "ServiceNow-outgoing-mapper",
    "mapping": {
        "ServiceNow SIR Incident": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "attack_vector": {
                    "complex": null,
                    "simple": "servicenowattackvector"
                },
                "business_criticality": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "servicenowbusinessimpact",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1 - Critical,2 - High,3 - Non-Critical"
                                        }
                                    },
                                    "mapped_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1,2,3"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    },
                    "simple": ""
                },
                "close_notes": {
                    "complex": null,
                    "simple": "servicenowresolutionnotes"
                },
                "description": {
                    "complex": null,
                    "simple": "details"
                },
                "impact": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "servicenowimpact",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "3 - Low,2 - Medium,1 - High"
                                        }
                                    },
                                    "mapped_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "3,2,1"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    },
                    "simple": ""
                },
                "priority": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "servicenowpriority",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1 - Critical,2 - High,3 - Moderate,4 - Low,5 - Planning"
                                        }
                                    },
                                    "mapped_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1,2,3,4,5"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    },
                    "simple": ""
                },
                "risk_score": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "severity",
                        "transformers": [
                            {
                                "args": {
                                    "by": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "20"
                                        }
                                    }
                                },
                                "operator": "multiply"
                            },
                            {
                                "args": {
                                    "by": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1"
                                        }
                                    }
                                },
                                "operator": "addition"
                            }
                        ]
                    },
                    "simple": ""
                },
                "severity": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "servicenowseverity",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1 - High,2 - Medium,3 - Low"
                                        }
                                    },
                                    "mapped_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1,2,3"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    },
                    "simple": ""
                },
                "short_description": {
                    "complex": null,
                    "simple": "name"
                },
                "sla_due": {
                    "complex": {
                        "accessor": "",
                        "filters": [
                            [
                                {
                                    "ignoreCase": false,
                                    "left": {
                                        "isContext": true,
                                        "value": {
                                            "complex": null,
                                            "simple": "remediationsla.dueDate"
                                        }
                                    },
                                    "operator": "isAfter",
                                    "right": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "0001-01-01T00:00:00Z"
                                        }
                                    }
                                }
                            ]
                        ],
                        "root": "remediationsla.dueDate",
                        "transformers": []
                    },
                    "simple": ""
                },
                "state": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "servicenowsirstate",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "Closed,Analysis,Contain,Eradicate,Recover,Draft,Review,Cancelled"
                                        }
                                    },
                                    "mapped_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "3,16,17,18,20,10,100,7"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    },
                    "simple": ""
                },
                "urgency": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "servicenowurgency",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1 - High,2 - Medium,3 - Low"
                                        }
                                    },
                                    "mapped_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1,2,3"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    },
                    "simple": ""
                }
            }
        },
        "ServiceNow Ticket": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "category": {
                    "complex": null,
                    "simple": "servicenowcategory"
                },
                "closed_at": {
                    "complex": {
                        "accessor": "",
                        "filters": [
                            [
                                {
                                    "ignoreCase": false,
                                    "left": {
                                        "isContext": true,
                                        "value": {
                                            "complex": null,
                                            "simple": "closed"
                                        }
                                    },
                                    "operator": "isAfter",
                                    "right": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "0001-01-01T00:00:00Z"
                                        }
                                    }
                                }
                            ]
                        ],
                        "root": "closed",
                        "transformers": []
                    },
                    "simple": ""
                },
                "description": {
                    "complex": null,
                    "simple": "details"
                },
                "escalation": {
                    "complex": null,
                    "simple": "servicenowescalation"
                },
                "impact": {
                    "complex": null,
                    "simple": "servicenowimpact"
                },
                "notify": {
                    "complex": null,
                    "simple": "servicenownotify"
                },
                "priority": {
                    "complex": null,
                    "simple": "servicenowpriority"
                },
                "resolved_at": {
                    "complex": {
                        "accessor": "",
                        "filters": [
                            [
                                {
                                    "ignoreCase": false,
                                    "left": {
                                        "isContext": true,
                                        "value": {
                                            "complex": null,
                                            "simple": "closed"
                                        }
                                    },
                                    "operator": "isAfter",
                                    "right": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "0001-01-01T00:00:00Z"
                                        }
                                    }
                                }
                            ]
                        ],
                        "root": "closed",
                        "transformers": []
                    },
                    "simple": ""
                },
                "severity": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "severity",
                        "transformers": [
                            {
                                "args": {
                                    "limit": {
                                        "isContext": false,
                                        "value": null
                                    },
                                    "replaceWith": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "3 - Low"
                                        }
                                    },
                                    "toReplace": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "0"
                                        }
                                    }
                                },
                                "operator": "replace"
                            },
                            {
                                "args": {
                                    "limit": {
                                        "isContext": false,
                                        "value": null
                                    },
                                    "replaceWith": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "3 - Low"
                                        }
                                    },
                                    "toReplace": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "0.5"
                                        }
                                    }
                                },
                                "operator": "replace"
                            },
                            {
                                "args": {
                                    "limit": {
                                        "isContext": false,
                                        "value": null
                                    },
                                    "replaceWith": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "3 - Low"
                                        }
                                    },
                                    "toReplace": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1"
                                        }
                                    }
                                },
                                "operator": "replace"
                            },
                            {
                                "args": {
                                    "limit": {
                                        "isContext": false,
                                        "value": null
                                    },
                                    "replaceWith": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "2 - Medium"
                                        }
                                    },
                                    "toReplace": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "2"
                                        }
                                    }
                                },
                                "operator": "replace"
                            },
                            {
                                "args": {
                                    "limit": {
                                        "isContext": false,
                                        "value": null
                                    },
                                    "replaceWith": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1 - High"
                                        }
                                    },
                                    "toReplace": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "3"
                                        }
                                    }
                                },
                                "operator": "replace"
                            },
                            {
                                "args": {
                                    "limit": {
                                        "isContext": false,
                                        "value": null
                                    },
                                    "replaceWith": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1 - High"
                                        }
                                    },
                                    "toReplace": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "4"
                                        }
                                    }
                                },
                                "operator": "replace"
                            }
                        ]
                    },
                    "simple": ""
                },
                "short_description": {
                    "complex": null,
                    "simple": "name"
                },
                "sla_due": {
                    "complex": null,
                    "simple": "remediationsla.dueDate"
                },
                "state": {
                    "complex": null,
                    "simple": "servicenowstate"
                },
                "subcategory": {
                    "complex": null,
                    "simple": "subcategory"
                },
                "urgency": {
                    "complex": null,
                    "simple": "servicenowurgency"
                },
                "work_start": {
                    "complex": null,
                    "simple": "timetoassignment.startDate"
                }
            }
        }
    },
    "name": "ServiceNow - Outgoing Mapper",
    "type": "mapping-outgoing",
    "version": -1,
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}