The following prerequites are required before you install ServiceNow apps or modules.

  1. Access to Carbon Black Cloud
  2. Access to ServiceNow
    • SanDiego, Tokyo and Vancouver are the supported versions.
    • ServiceNow ITSM or ServiceNow SecOps
  3. Determine whether you will use the ITSM app or the SecOps app to align to the ServiceNow module for which you are licensed.
  4. Determine whether you will get alerts from Carbon Black Cloud using the Alerts REST API or from an AWS S3 Bucket using the Carbon Black Cloud Data Forwarder.
    • The REST API is easier to set up, requiring only API credentials to be entered into ServiceNow. ServiceNow will then poll Carbon Black Cloud for new Alerts.
    • The Data Forwarder is recommended when you have a high volume or significant bursts of data because it provides improved scalability for large volumes of data. It requires:
      • A Data Forwarder to be configured in Carbon Black Cloud that writes to an AWS S3 Bucket owned by you.
      • A ServiceNow MID server to ingest the data.