To synchronize an alert status in ServiceNow, perform the following procedure.

Use this procedure after Alerts that were ingested to ServiceNow have been Closed or Opened in the Carbon Black Cloud console.

Procedure

  1. Log in to your ServiceNow instance.
  2. Go to VMware Carbon Black Cloud > Alerts.
  3. Select alerts that were updated in Carbon Black Cloud.
  4. Click the Sync Selected Alerts button.
    A pop-up window displays the message: Selected alerts synced successfully with Carbon Black Cloud alerts.

    The app updates the Status, Workflow, Remediation Status, and Close Note for each Alert record in ServiceNow based on the status in Carbon Black Cloud.

  5. Open the selected alerts in ServiceNow and check the updated fields.