Ticket SNOW form Kibana

[Dariia_Hrebenichenko]

Hello everybody!

I need to create tickets in ServiceNow what based on information in Kibana.

I already have alerting system what takes information from kibana.log and uses logstash to send different emails.

Now I need to make tickets in SNOW using pretty much the same information.
I saw something about HTTP plugins, but I'm totally lost in amount of information.

Thank you for answers!

[erikg]

Hey @Dariia_Hrebenichenko
There is a Kibana Alert Connectors for ServiceNow:

ServiceNow ITSM connector and action | Kibana
ServiceNow ITOM connector and action | Kibana
ServiceNow SecOps connector and action | Kibana

[leandrojmp (Leandro Pereira)]

The connector requires a license, I think that the OP does not have a license as logstash is being used to send e-mails based on alerts, which also has a connector that requires a license.

@Dariia_Hrebenichenko

Now I need to make tickets in SNOW using pretty much the same information.
I saw something about HTTP plugins, but I'm totally lost in amount of information.

You can use the http output plugin, but you need to test it to see the exactly payload that ServiceNow expects and how to build it in Logstash.