ServiceNow CMDB integration and how to use it according to best practise

[Ondrej_Remes]

Hi,
we have successfuly  integrated ServiceNow CMDB into Cortex XDR and have fetched data to datasets servicenow_cmdb_*.


We did not find in the Admin guide information how and if those ServiceNow CMDB data will be propagated into Asset information in the XDR console.

Does anybody knows how to uilize those CMDB data for enriching information about assets and how to utilize for Group definitions in the XDR.

Thanks

Ondrej

[nsinghvirk · Accepted solution]

Hello @Ondrej_Remes 

Thanks for reaching out on live community!

The data ingested from Servicenow CMDB do not reflect on the asset inventory. Ingested data can only be utilised by using via XQL query or by writing a correlation rule. You can leverage CMDB data by comparing it against datasets like "xdr_data" and "endpoints" for your use case.