topic Re: ServiceNow CMDB integration and how to use it according to best practise in Cortex XDR Discussions

ServiceNow CMDB integration and how to use it according to best practise

Ondrej_Remes — Tue, 29 Aug 2023 11:44:18 GMT

Hi,
we have successfuly integrated ServiceNow CMDB into Cortex XDR and have fetched data to datasets servicenow_cmdb_*.

We did not find in the Admin guide information how and if those ServiceNow CMDB data will be propagated into Asset information in the XDR console.

Does anybody knows how to uilize those CMDB data for enriching information about assets and how to utilize for Group definitions in the XDR.

Thanks

Ondrej

Re: ServiceNow CMDB integration and how to use it according to best practise

nsinghvirk — Tue, 29 Aug 2023 15:24:14 GMT

Hello @Ondrej_Remes

Thanks for reaching out on live community!

The data ingested from Servicenow CMDB do not reflect on the asset inventory. Ingested data can only be utilised by using via XQL query or by writing a correlation rule. You can leverage CMDB data by comparing it against datasets like "xdr_data" and "endpoints" for your use case.