Skip to main content
Using the BlueApp for ServiceNow, you can streamline incident response activities by collecting data from ServiceNow and automatically opening ServiceNow incident tickets in response to threats detected by USM Anywhere. The BlueApp for ServiceNow gathers data from the following ServiceNow tables. When you enable access to these tables, the BlueApp pulls all their records and creates events in USM Anywhere. ServiceNow Tables Pulled by the BlueApp
Table NameDescription
pwd_reset_requestA table containing password reset requests
syseventA table containing events generated by the ServiceNow system
syslog_transactionA table containing transaction logs
sys_auditA table containing inserts and updates to audited records
sys_audit_deleteA table containing audit-deleted records
sys_userA table containing all the user records
sys_user_roleA table containing all the user role records
sys_attachmentA table containing all the attachment records
report_viewA table containing report_view access control records
The BlueApp for ServiceNow is available in the Standard and Premium editions of USM Anywhere. See the Affordable pricing to fit every budget page for more information about the features and support provided by each of the USM Anywhere editions.
If the BlueApp fails and you receive a message informing you that it has not been loaded, please contact LevelBlue Technical Support for assistance.
This topic discusses these subtopics: