ServiceNow

Integration version2.7.0

Overview

ServiceNow is an IT service management (ITSM) platform used to record, track, and manage enterprise-level IT processes in one centralized system.

The Datadog-ServiceNow integration bridges observability and IT service management, enabling seamless collaboration between operations and service teams. Our bi-directional integration consists of the following key components:

Send alerts, cases, and incidents generated in Datadog to ServiceNow as records in the Incident or Event tables. Manage and resolve these issues directly from Datadog, creating a seamless connection between observability and IT service workflows across IT service management (ITSM) and IT operations management (ITOM).

Get started with the ITOM/ITSM integration.

Enrich Datadog hosts, services, and devices with business-specific information stored as CIs in Configuration Management Database (CMDB), enabling you to better understand your infrastructure usage, accelerate troubleshooting, and visualize your Datadog entities with the metadata you care about.

Get started with the CMDB Enrichment integration.

Use Datadog as a discovery mechanism for ServiceNow CMDB Configuration Items (CIs) with the Datadog Service Graph Connector.

Get started with the Service Graph Connector integration.

Monitor the health and performance of your ServiceNow instances. Our integration provides logs and metrics giving you rich insights into how your teams are working with the various ServiceNow modules.

Get started with ServiceNow Performance Monitoring.

Note: The Datadog ServiceNow integration supports ServiceNow releases that are not listed as end of life.

Setup

Click the links above to view setup guides for each component.

Configure the ServiceNow tile in Datadog

Begin by entering your ServiceNow instance details directly into the tile on the General tab. This configuration will enable the integration to support the following features:

  • IT Operations Management (ITOM) and IT Service Management (ITSM)
  • CMDB Enrichment
  • Collection of ServiceNow Performance Monitoring metrics and logs

To configure a new instance, follow these steps:

  1. In Datadog, navigate to the ServiceNow integration tile on the Integrations page.
  2. Click on Add New Instance.
  3. Add the instance name, which is the subdomain of your ServiceNow domain: <INSTANCE_NAME>.service-now.com.
  4. Add the username and password for your ServiceNow instance.
  5. Select the type of performance metrics and logs you want to receive:
    • ITSM
    • ITAM
    • CMDB Health
    • Security Incident Response
    • Vulnerability Response

servicenow integration new instance

ServiceNow performance logs and metrics

To receive logs and metrics about your instance performance, configure ServiceNow metric settings using a user account that has the following roles and plugins installed:

ModuleData CollectedUser Roles RequiredPlugin Required
ITSMlogsitil-
ITAMlogsasset-
CMDB Healthlogs, metricscmdb_dedup_admin-
Vulnerability Response (VR)logs, metricssn_sec_analytics.read
sn_vul.app_read_all
sn_vul.read_all
sn_vul_container.read_all
Vulnerability Response and Configuration Compliance for Containers
Vulnerability Response
Security Incident Response (SIR)logssn_si.readSecurity Incident Response

Tip: You can create a limited user in ServiceNow just for Datadog.

Create a ServiceNow Account with correct permissions for Datadog

To use the integration, create a ServiceNow user (for example, with username datadog or datadog_integration) and assign the user the following roles:

  • x_datad_datadog.user and
  • import_set_loader and
  • import_transformer

Data Collected

Metrics

servicenow_performance.cmdb_health_result_rel_all.rel_allrules.relations_count
(count)
Count of CI relationships which are not compliant with all relationship rules
servicenow_performance.cmdb_health_scorecard.audit.failed
(count)
Count of failed audit checks
servicenow_performance.cmdb_health_scorecard.audit.score
(gauge)
Score based on audit checks
Shown as percent
servicenow_performance.cmdb_health_scorecard.completeness.score
(gauge)
Score based on the completeness of CIs
Shown as percent
servicenow_performance.cmdb_health_scorecard.correctness.score
(gauge)
Score based on the correctness of CIs
Shown as percent
servicenow_performance.cmdb_health_scorecard.duplicate.failed
(count)
Count of duplicate CIs
servicenow_performance.cmdb_health_scorecard.duplicate.score
(gauge)
Score based on the count of duplicate CIs
Shown as percent
servicenow_performance.cmdb_health_scorecard.orphan.failed
(count)
Count of orphan CIs that failed checks
servicenow_performance.cmdb_health_scorecard.orphan.score
(gauge)
Score based on the count of orphan CIs
Shown as percent
servicenow_performance.cmdb_health_scorecard.recommended.failed
(count)
Count of recommended checks that failed
servicenow_performance.cmdb_health_scorecard.recommended.score
(gauge)
Score based on the count of recommended checks
Shown as percent
servicenow_performance.cmdb_health_scorecard.rel_duplicate.failed
(count)
Count of duplicate relationships that failed checks
servicenow_performance.cmdb_health_scorecard.rel_orphan.failed
(count)
Count of orphan relationships that failed checks
servicenow_performance.cmdb_health_scorecard.rel_stale.failed
(count)
Count of stale relationships that failed checks
servicenow_performance.cmdb_health_scorecard.relationship.score
(gauge)
Score based on the CI relationship checks
Shown as percent
servicenow_performance.cmdb_health_scorecard.required.failed
(count)
Count of required checks that failed
servicenow_performance.cmdb_health_scorecard.required.score
(gauge)
Score based on the count of required checks
Shown as percent
servicenow_performance.cmdb_health_scorecard.staleness.failed
(count)
Count of stale CIs that failed checks
servicenow_performance.cmdb_health_scorecard.staleness.score
(gauge)
Score based on the count of stale CIs
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.active_application_vulnerable_items_without_risk_score.score
(gauge)
Score based on active application vulnerable items without a risk score
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.active_container_vulnerable_items_without_risk_score.score
(gauge)
Score based on active container vulnerable items without a risk score
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.active_records_without_risk_score.score
(gauge)
Score based on active records without a risk score
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.active_vulnerable_items_without_risk_score.score
(gauge)
Score based on active vulnerable items without a risk score
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.application_vulnerable_items_without_remediation_target.score
(gauge)
Score based on application vulnerable items without a remediation target
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.auto_close_container_vulnerable_items.score
(gauge)
Score based on auto-closed container vulnerable items
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.auto_close_stale_records.score
(gauge)
Score based on auto-closed stale records
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.auto_delete_rules.score
(gauge)
Score based on auto-delete rules
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.business_rules_on_the_detections_table.score
(gauge)
Score based on business rules on the detections table
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.closed_application_vulnerable_items_without_substate.score
(gauge)
Score based on closed application vulnerable items without substate
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.closed_container_vulnerable_items_without_substate.score
(gauge)
Score based on closed container vulnerable items without substate
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.closed_records_without_substate.score
(gauge)
Score based on closed records without substate
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.closed_vulnerable_items_without_substate.score
(gauge)
Score based on closed vulnerable items without substate
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.container_image_vulnerable_items_without_remediation_target.score
(gauge)
Score based on container image vulnerable items without a remediation target
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.customized_business_rules.score
(gauge)
Score based on customized business rules
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.customized_script_includes.score
(gauge)
Score based on customized script includes
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.defective_active_application_vulnerable_items.score
(gauge)
Score based on defective active application vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.defective_active_container_vulnerable_items.score
(gauge)
Score based on defective active container vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.defective_active_records.score
(gauge)
Score based on defective active records
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.defective_active_vulnerable_items.score
(gauge)
Score based on defective active vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.disabled_integrations.score
(gauge)
Score based on disabled integrations
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.discovered_item_matching_rate.score
(gauge)
Score based on discovered item matching rate
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.discovered_item_with_no_ci.score
(gauge)
Score based on discovered items with no CI
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.failed_integration_runs_in_the_past_week.score
(gauge)
Score based on failed integration runs in the past week
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.failed_or_stalled_background_jobs.score
(gauge)
Score based on failed or stalled background jobs
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.items_without_remediation_target.score
(gauge)
Score based on items without a remediation target
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.pa_installed_but_not_activated.score
(gauge)
Score based on PA installed but not activated
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.remediation_tasks_without_assignment_group.score
(gauge)
Score based on remediation tasks without an assignment group
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.remediation_tasks_without_assignment_group_for_avr.score
(gauge)
Score based on remediation tasks without an assignment group for AVR
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.remediation_tasks_without_assignment_group_for_cvr.score
(gauge)
Score based on remediation tasks without an assignment group for CVR
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.remediation_tasks_without_assignment_group_for_vr.score
(gauge)
Score based on remediation tasks without an assignment group for VR
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.slow_business_rules_and_scripts.score
(gauge)
Score based on slow business rules and scripts
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.slow_queries.score
(gauge)
Score based on slow queries
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.stalled_integrations.score
(gauge)
Score based on stalled integrations
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.unassigned_active_application_vulnerable_items.score
(gauge)
Score based on unassigned active application vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.unassigned_active_records.score
(gauge)
Score based on unassigned active records
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.unassigned_active_vulnerable_items.score
(gauge)
Score based on unassigned active vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.unassigned_container_vulnerable_items.score
(gauge)
Score based on unassigned container vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.ungrouped_active_application_vulnerable_items.score
(gauge)
Score based on ungrouped active application vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.ungrouped_active_container_vulnerable_items.score
(gauge)
Score based on ungrouped active container vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.ungrouped_active_records.score
(gauge)
Score based on ungrouped active records
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.ungrouped_active_vulnerable_items.score
(gauge)
Score based on ungrouped active vulnerable items
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.unmatched_cis_in_discovered_items.score
(gauge)
Score based on unmatched CIs in discovered items
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.unused_ci_lookup_rules.score
(gauge)
Score based on unused CI lookup rules
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.upgrade_conflicts.score
(gauge)
Score based on upgrade conflicts
servicenow_performance.sn_sec_analytics_health_dashboard_data_updates.vulnerable_items_without_remediation_target.score
(gauge)
Score based on vulnerable items without a remediation target
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_updates.configuration.score
(gauge)
Score based on configuration health
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_updates.data_health.score
(gauge)
Score based on data health
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_updates.implementation_health.score
(gauge)
Score based on implementation health
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_updates.integration_health.score
(gauge)
Score based on integration health
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_updates.overall_health.score
(gauge)
Score based on overall health
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_updates.performance.score
(gauge)
Score based on performance health
Shown as percent
servicenow_performance.sn_sec_analytics_health_dashboard_updates.process_health.score
(gauge)
Score based on process health
Shown as percent

Privacy policy

Datadog collects Business Service, Assignment Group, email, name, sysID, and username to populate corresponding fields in ServiceNow. Processing of any personal data collected by Datadog in connection with this integration is subject to Datadog’s privacy policy.

Support

Need additional help? Contact Datadog support.

Further Reading