Incident Mirroring - Administrator Guide - EoL - 6.6 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Cortex XSOAR
Creation date
Last date published
Administrator Guide
End of Life > EoL

Set up ServiceNow v2 integration to mirror ServiceNow incidents to Cortex XSOAR.

When mirroring incidents, you can make changes in a third-party application like ServiceNow that will be reflected in Cortex XSOAR, or vice versa. You can also attach files from either of the systems, which will then be available in the other system.

Setting up your integration to mirror incidents from the third-party application in Cortex XSOAR includes configuring the integration settings and incoming and outgoing mappers. You may also need to:

  • Configure account roles for API calls. For example, see the ServiceNow v2 integration.

  • Configure mirroring for triggering incidents originating from your third-party application or from another fetching integration. For example, see the ServiceNow v2 integration.

  • Run mirroring commands. For more information about mirroring commands, see the Mirroring Integration or your third-party integration, for example ServiceNow v2.