Преобразование действий ITSM, которые отправляют события в ServiceNow, для защиты действий веб-перехватчика
Примечание
Начиная с сентября 2022 г. мы начинаем трехлетний процесс устаревшей поддержки использования действий ITSM для отправки событий в ServiceNow.
Чтобы перенести соединитель ITSM в новую безопасную интеграцию веб-перехватчика, следуйте инструкциям по настройке безопасного веб-перехватчика.
Если вы синхронизируете рабочие элементы между ServiceNow и рабочей областью Azure Log Analytics (двунаправленная), выполните следующие действия, чтобы извлечь данные из ServiceNow в рабочую область Log Analytics.
Извлечение данных из экземпляра ServiceNow в рабочую область Log Analytics
В портал Azure создайте рабочий процесс приложения логики потребления.
Создайте HTTP-запрос GET, который использует API таблиц ServiceNow для получения данных из экземпляра ServiceNow. См. пример использования вызова таблицы для получения инцидентов.
Чтобы просмотреть список таблиц в экземпляре ServiceNow, в ServiceNow перейдите в раздел Определения системы, а затем таблицы. Примеры имен таблиц:
change_request
,em_alert
,incident
,em_event
.В Logic Apps добавьте
Parse JSON
действие к результатам запроса GET, созданного на шаге 2.Добавьте схему для полученных полезных данных. Можно использовать функцию Использовать пример полезных данных для создания схемы . См. пример схемы для
change_request
таблицы.Создание рабочей области Log Analytics.
for each
Создайте цикл для вставки каждой строки данных, возвращенных API, в данные в рабочей области Log Analytics.
В разделе Выбор выходных данных из предыдущих шагов введите набор данных, возвращенный действием анализа JSON, созданным на шаге 4.
Создайте каждую строку из набора, который входит в цикл.
На последнем шаге цикла используйте для
Send data
отправки данных в рабочую область Log Analytics с этими значениями.- Имя настраиваемого журнала: имя настраиваемого журнала, используемого для сохранения данных в рабочей области Log Analytics.
- Подключение к рабочей области La, созданной на шаге 6.
Данные отображаются в разделе Устаревшие пользовательские журналы рабочей области Log Analytics.
Пример схемы JSON для таблицы change_request
{
"properties": {
"content": {
"properties": {
"result": {
"items": {
"properties": {
"active": {
"type": "string"
},
"activity_due": {
"type": "string"
},
"additional_assignee_list": {
"type": "string"
},
"approval": {
"type": "string"
},
"approval_history": {
"type": "string"
},
"approval_set": {
"type": "string"
},
"assigned_to": {
"properties": {
"link": {
"type": "string"
},
"value": {
"type": "string"
}
},
"type": "object"
},
"assignment_group": {
"type": "string"
},
"backout_plan": {
"type": "string"
},
"business_duration": {
"type": "string"
},
"business_service": {
"type": "string"
},
"cab_date": {
"type": "string"
},
"cab_delegate": {
"type": "string"
},
"cab_recommendation": {
"type": "string"
},
"cab_required": {
"type": "string"
},
"calendar_duration": {
"type": "string"
},
"category": {
"type": "string"
},
"change_plan": {
"type": "string"
},
"chg_model": {
"type": "string"
},
"close_code": {
"type": "string"
},
"close_notes": {
"type": "string"
},
"closed_at": {
"type": "string"
},
"closed_by": {
"properties": {
"link": {
"type": "string"
},
"value": {
"type": "string"
}
},
"type": "object"
},
"cmdb_ci": {
"properties": {
"link": {
"type": "string"
},
"value": {
"type": "string"
}
},
"type": "object"
},
"comments": {
"type": "string"
},
"comments_and_work_notes": {
"type": "string"
},
"company": {
"type": "string"
},
"conflict_last_run": {
"type": "string"
},
"conflict_status": {
"type": "string"
},
"contact_type": {
"type": "string"
},
"correlation_display": {
"type": "string"
},
"correlation_id": {
"type": "string"
},
"delivery_plan": {
"type": "string"
},
"delivery_task": {
"type": "string"
},
"description": {
"type": "string"
},
"due_date": {
"type": "string"
},
"end_date": {
"type": "string"
},
"escalation": {
"type": "string"
},
"expected_start": {
"type": "string"
},
"follow_up": {
"type": "string"
},
"group_list": {
"type": "string"
},
"impact": {
"type": "string"
},
"implementation_plan": {
"type": "string"
},
"justification": {
"type": "string"
},
"knowledge": {
"type": "string"
},
"location": {
"type": "string"
},
"made_sla": {
"type": "string"
},
"number": {
"type": "string"
},
"on_hold": {
"type": "string"
},
"on_hold_reason": {
"type": "string"
},
"on_hold_task": {
"type": "string"
},
"opened_at": {
"type": "string"
},
"opened_by": {
"properties": {
"link": {
"type": "string"
},
"value": {
"type": "string"
}
},
"type": "object"
},
"order": {
"type": "string"
},
"outside_maintenance_schedule": {
"type": "string"
},
"parent": {
"type": "string"
},
"phase": {
"type": "string"
},
"phase_state": {
"type": "string"
},
"priority": {
"type": "string"
},
"production_system": {
"type": "string"
},
"reason": {
"type": "string"
},
"reassignment_count": {
"type": "string"
},
"requested_by": {
"properties": {
"link": {
"type": "string"
},
"value": {
"type": "string"
}
},
"type": "object"
},
"requested_by_date": {
"type": "string"
},
"review_comments": {
"type": "string"
},
"review_date": {
"type": "string"
},
"review_status": {
"type": "string"
},
"risk": {
"type": "string"
},
"risk_impact_analysis": {
"type": "string"
},
"route_reason": {
"type": "string"
},
"scope": {
"type": "string"
},
"service_offering": {
"type": "string"
},
"short_description": {
"type": "string"
},
"sla_due": {
"type": "string"
},
"start_date": {
"type": "string"
},
"state": {
"type": "string"
},
"std_change_producer_version": {
"type": "string"
},
"sys_class_name": {
"type": "string"
},
"sys_created_by": {
"type": "string"
},
"sys_created_on": {
"type": "string"
},
"sys_domain": {
"properties": {
"link": {
"type": "string"
},
"value": {
"type": "string"
}
},
"type": "object"
},
"sys_domain_path": {
"type": "string"
},
"sys_id": {
"type": "string"
},
"sys_mod_count": {
"type": "string"
},
"sys_tags": {
"type": "string"
},
"sys_updated_by": {
"type": "string"
},
"sys_updated_on": {
"type": "string"
},
"task_effective_number": {
"type": "string"
},
"test_plan": {
"type": "string"
},
"time_worked": {
"type": "string"
},
"type": {
"type": "string"
},
"unauthorized": {
"type": "string"
},
"universal_request": {
"type": "string"
},
"upon_approval": {
"type": "string"
},
"upon_reject": {
"type": "string"
},
"urgency": {
"type": "string"
},
"user_input": {
"type": "string"
},
"watch_list": {
"type": "string"
},
"work_end": {
"type": "string"
},
"work_notes": {
"type": "string"
},
"work_notes_list": {
"type": "string"
},
"work_start": {
"type": "string"
}
},
"required": [
"parent",
"reason",
"watch_list",
"upon_reject",
"sys_updated_on",
"type",
"approval_history",
"number",
"test_plan",
"cab_delegate",
"requested_by_date",
"state",
"sys_created_by",
"knowledge",
"order",
"phase",
"cmdb_ci",
"delivery_plan",
"impact",
"active",
"work_notes_list",
"priority",
"sys_domain_path",
"cab_recommendation",
"production_system",
"review_date",
"business_duration",
"group_list",
"requested_by",
"change_plan",
"approval_set",
"implementation_plan",
"universal_request",
"end_date",
"short_description",
"correlation_display",
"delivery_task",
"work_start",
"additional_assignee_list",
"outside_maintenance_schedule",
"std_change_producer_version",
"service_offering",
"sys_class_name",
"closed_by",
"follow_up",
"reassignment_count",
"review_status",
"assigned_to",
"start_date",
"sla_due",
"comments_and_work_notes",
"escalation",
"upon_approval",
"correlation_id",
"made_sla",
"backout_plan",
"conflict_status",
"task_effective_number",
"sys_updated_by",
"opened_by",
"user_input",
"sys_created_on",
"on_hold_task",
"sys_domain",
"route_reason",
"closed_at",
"review_comments",
"business_service",
"time_worked",
"chg_model",
"expected_start",
"opened_at",
"work_end",
"phase_state",
"cab_date",
"work_notes",
"close_code",
"assignment_group",
"description",
"on_hold_reason",
"calendar_duration",
"close_notes",
"sys_id",
"contact_type",
"cab_required",
"urgency",
"scope",
"company",
"justification",
"activity_due",
"comments",
"approval",
"due_date",
"sys_mod_count",
"on_hold",
"sys_tags",
"conflict_last_run",
"unauthorized",
"location",
"risk",
"category",
"risk_impact_analysis"
],
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"schema": {
"properties": {
"properties": {
"properties": {
"result": {
"properties": {
"items": {
"properties": {
"properties": {
"properties": {
"active": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"activity_due": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"additional_assignee_list": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"approval": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"approval_history": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"approval_set": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"assigned_to": {
"properties": {
"properties": {
"properties": {
"link": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"value": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
},
"assignment_group": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"backout_plan": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"business_duration": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"business_service": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"cab_date": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"cab_delegate": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"cab_recommendation": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"cab_required": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"calendar_duration": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"category": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"change_plan": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"chg_model": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"close_code": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"close_notes": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"closed_at": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"closed_by": {
"properties": {
"properties": {
"properties": {
"link": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"value": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
},
"cmdb_ci": {
"properties": {
"properties": {
"properties": {
"link": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"value": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
},
"comments": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"comments_and_work_notes": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"company": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"conflict_last_run": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"conflict_status": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"contact_type": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"correlation_display": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"correlation_id": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"delivery_plan": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"delivery_task": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"description": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"due_date": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"end_date": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"escalation": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"expected_start": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"follow_up": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"group_list": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"impact": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"implementation_plan": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"justification": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"knowledge": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"location": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"made_sla": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"number": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"on_hold": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"on_hold_reason": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"on_hold_task": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"opened_at": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"opened_by": {
"properties": {
"properties": {
"properties": {
"link": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"value": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
},
"order": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"outside_maintenance_schedule": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"parent": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"phase": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"phase_state": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"priority": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"production_system": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"reason": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"reassignment_count": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"requested_by": {
"properties": {
"properties": {
"properties": {
"link": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"value": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
},
"requested_by_date": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"review_comments": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"review_date": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"review_status": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"risk": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"risk_impact_analysis": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"route_reason": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"scope": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"service_offering": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"short_description": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sla_due": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"start_date": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"state": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"std_change_producer_version": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_class_name": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_created_by": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_created_on": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_domain": {
"properties": {
"properties": {
"properties": {
"link": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"value": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_domain_path": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_id": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_mod_count": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_tags": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_updated_by": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"sys_updated_on": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"task_effective_number": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"test_plan": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"time_worked": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"type": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"unauthorized": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"universal_request": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"upon_approval": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"upon_reject": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"urgency": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"user_input": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"watch_list": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"work_end": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"work_notes": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"work_notes_list": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
},
"work_start": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"required": {
"items": {
"type": "string"
},
"type": "array"
},
"type": {
"type": "string"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
}