Citiți în limba engleză Editare

Partajați prin


Create a ticket in Defender for Cloud

The integration between Defender for Cloud with ServiceNow's IT Service Management (ITSM) module, allows Defender for Cloud customers to create tickets in Defender for Cloud that connect to a ServiceNow account. ServiceNow tickets are then linked directly to recommendations in Defender for Cloud. When a ticket is connected to a recommendation, the two platforms can facilitate efficient incident management and resolution.

Prerequisites

Create a new ticket based on a recommendation to ServiceNow

Security admins can create and assign tickets directly from the Defender for Cloud portal.

  1. Sign in to the Azure portal.

  2. Navigate to Microsoft Defender for Cloud > Recommendations.

  3. Select a recommendation you want to create a ServiceNow ticket for, and assign an owner to.

  4. Select View recommendation for all resources.

  5. Expand the Affected resources section.

  6. Select the resource from the unhealthy resources and select Assign owner.

    Screenshot of how to create an assignment.

  7. In the Type field, select ServiceNow

    Screenshot that shows the create assignment window and the type field where you select ServiceNow.

  8. Select the integration instance.

  9. Select the ticket type.

    Notă

    In ServiceNow, there are several types of tickets that can be used to manage and track different types of incidents, requests, and tasks. Only incident, change request, and problem are supported with this integration.

    Screenshot of how to complete the assignment type.

  10. Expand the assignment details section.

  11. Complete the following fields:

    • Assigned to: Choose the owner whom you would like to assign the affected recommendation to.

    • Caller: Represents the user defining the assignment.

    • Description and Short Description: Enter a description, and short description.

    • Remediation timeframe: Select the remediation timeframe.

    • Apply Grace Period: (Optional) apply a grace period.

    • Set Email Notifications: (Optional) You can send a reminder to the owners or the owner’s direct manager.

      Screenshot of how to complete the assignment details.

  12. Select Create.

After the assignment is created, the Ticket ID assigned to this affected resource will appear next to the resource in the recommendation. The Ticket ID represents the ticket created in the ServiceNow portal. You can select the Ticket ID to navigate to the newly created incident in the ServiceNow portal.

Notă

When the integration is deleted, all of the assignments will be deleted. Deletion can take up to 24 hrs.

Next step

Notă: Autorul a creat acest articol cu ajutorul inteligenței artificiale. Aflați mai multe