Ivanti Neurons for ITSM - Create Incident per Asset

Ivanti Neurons for ITSM - Create Incident per Asset creates a new incident in your Ivanti Neurons for ITSM instance for each asset, for:

• Assets returned by the selected query or assets selected on the relevant asset page.

Required Fields

These fields must be configured to run the Enforcement Action.

• Use stored credentials from the Ivanti Neurons for ITSM adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.

  • When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.

    Note

    To use this option, you must successfully configure an Ivanti Neurons for ITSM adapter connection.

• Required Incident Fields - The Ivanti Neurons for ITSM incident fields required to create the incident. Add a row for each field, and configure the following for each row:

  • Field Name - Select an incident field from the dropdown, or type the name of a custom field. The available fields are Category, Description, ProfileLink, Service, Source, Status, and Symptom.
  • Value - The value to set for the field. Enter static text, or a template that uses placeholders defined in Map Axonius Fields to Template Placeholders. For example, {{hostname}}.

• Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Working with Axonius Compute Nodes.

Additional Fields

These fields are optional.

• Map Axonius Fields to Template Placeholders - Map Axonius fields to placeholder names. Reference a placeholder in the Value of a Required Incident Field or an Additional Field as {{placeholder_name}}, and Axonius replaces it with the value of the mapped field for each asset. For example, map Host Name to hostname, and then enter Missing XDR agent on {{hostname}} as the value of the Description field.

  Note

  • A placeholder that is not mapped to an Axonius field is left as is in the text.
  • If the mapped field has no value for an asset, the placeholder is replaced with an empty string.
  • If the mapped field has multiple values for an asset (for example, MAC addresses from several network interfaces), the placeholder is replaced with the most common value.

• Additional Fields - Additional Ivanti Neurons for ITSM incident fields to set on the incident. Add a row for each field, and configure the following for each row:

  • Field Name - Select an incident field from the dropdown, or type the name of a custom field. The available fields are CreatedBy, Owner, OwnerTeam, OwnerTeam_Valid, Owner_Valid, Priority, RequestorLink_RecID, and Subject.
  • Value - The value to set for the field. Enter static text, or a template that uses placeholders defined in Map Axonius Fields to Template Placeholders. For example, {{hostname}}.

Connection Settings

APIs

Axonius uses the Ivanti Neurons for ITSM REST API - POST /api/odata/businessobject/incidents

Required Ports

Axonius must be able to communicate via the following ports:

• TCP port 443 (HTTPS)

Required Permissions

The following permissions and requirements are needed:

• The REST API Key must have write permissions to the /api/odata/businessobject/incidents endpoint.
• The API Key user role must have permission to create incidents in Ivanti Neurons for ITSM.

Version Matrix

This Enforcement Action was tested only with the versions marked as supported, but may work with other versions. Contact Axonius Support if you have a version that is not listed and it is not functioning as expected.

---

To learn more about Enforcement Actions, see Enforcement Actions.