Manually Create a Service Now Incident

To manually create a ServiceNow Incident, perform the following procedure.

Procedure

1. Log in to your ServiceNow instance.
2. Go to VMware Carbon Black Cloud > Alerts.
3. Click to view any Alert record that is in an Open state.
4. Click the Create Incident button.
   An Incident will be created for that alert, alert fields mapped to the Incident field, and the Security Incident ID displayed in the Alert record.
5. To open the Incident, click Preview this record > Open record.