The following prerequites are required before you install ServiceNow apps or modules.
- Access to Carbon Black Cloud
- Access to ServiceNow
- SanDiego, Tokyo and Vancouver are the supported versions.
- ServiceNow ITSM or ServiceNow SecOps
- Determine whether you will use the ITSM app or the SecOps app to align to the ServiceNow module for which you are licensed.
- Determine whether you will get alerts from Carbon Black Cloud using the Alerts REST API or from an AWS S3 Bucket using the Carbon Black Cloud Data Forwarder.
- The REST API is easier to set up, requiring only API credentials to be entered into ServiceNow. ServiceNow will then poll Carbon Black Cloud for new Alerts.
- The Data Forwarder is recommended when you have a high volume or significant bursts of data because it provides improved scalability for large volumes of data. It requires:
- A Data Forwarder to be configured in Carbon Black Cloud that writes to an AWS S3 Bucket owned by you.
- A ServiceNow MID server to ingest the data.