To execute a SOAR action in ServiceNow, perform the following procedure.

Procedure

  1. Log in to your ServiceNow instance.
  2. Open an Incident that has linked alerts.
  3. In the Related Links section, click Show All Related Lists > Alerts.
  4. Select one or more alerts.
  5. From Actions on Selected Rows, select the SOAR action to execute.

    SOAR actions in alerts