Cortex® Xpanse™ ServiceNow App is configured after installation.
Once you have installed the
Cortex® Xpanse™ ServiceNow App, do the following to configure the
. There are mappings
defined as defaults, but these can be changed by clicking on the
, modifying the
mapping using the drop-down, and clicking
Unmapped exposure levels do not have an incident level defined.
, and select
. There are default values for which event types should
trigger incidents. To change these default settings, simply click
the event type, and select or clear the
When finished, click
the change. Updating this default setting affects future incident
creation only. Incidents are not recorded for unmapped event types.
left pane, search for
. Under the
Expanse API Token
, specify the
token. To complete this step, click
the top right of the window, saving your Expander API token for
the ServiceNow integration to use when calling Expander APIs. This
update kicks off the ingestion of Expander data to generate ServiceNow