Once all the Prisma SD-WAN attributes are translated and populated into the ServiceNow construct, a session is established with the ServiceNow instance configured in the CloudBlade using Basic HTTP Authentication. An incident ticket is created where the Prisma SD-WAN Event attributes are mapped to ServiceNow table columns. Upon successful ticket creation, ServiceNow returns HTTP code 201 – Created and the response package contains the incident ticket number.

This incident ticket number is stored locally in a database and mapped to the Prisma SD-WAN event_id.