ServiceNow
Overview
Sifflet natively integrates with your ServiceNow incident management workflow. When a Sifflet monitor fails, a ServiceNow incident can be created automatically, ensuring that data quality issues detected by Sifflet are tracked in ServiceNow and preventing critical problems from being missed.
Setting up the integration
Integration requirements
The ServiceNow integration process requires actions in both Sifflet and ServiceNow. A ServiceNow user with OAuth permissions will need to create an OAuth Application Endpoint, and a user with the ServiceNow ITIL role will need to grant permissions to Sifflet. These tasks can be performed by different users.
To connect Sifflet to your ServiceNow account, follow these steps:
- In Sifflet, go to Settings (via the sidebar) and click Collaboration Tools. Then, in the ServiceNow section, click Connect to ServiceNow.
- Copy the redirect URL displayed in the integration pop-up. You will need this URL later.
- In ServiceNow, create an OAuth Application Endpoint:
- In ServiceNow, create an OAuth application endpoint in your account. (Refer to the ServiceNow documentation here for guidance.)
- For the Redirect URL parameter, paste the URL you copied in Step 2.
- You can leave other parameters at their default values.
OAuth refresh token lifespan
By default, ServiceNow OAuth refresh tokens have a default lifespan of 100 days. We highly recommend increasing the lifespan of the token created for Sifflet.
If you decide to keep the default lifespan, you'll need to reconfigure the integration every 100 days.
- Complete the Sifflet Integration:
- Return to Sifflet and continue creating the ServiceNow integration (following the same process as in Step 1).
- Enter the following details in the integration pop-up:
- Your ServiceNow instance URL (e.g.,
https://yourinstance.service-now.com
) - Your OAuth application client ID
- Your OAuth application client secret
ServiceNow Role Requirement
The user creating the ServiceNow integration in Sifflet must have ServiceNow access with either the ITIL role assigned or sufficient permissions to create. This enables Sifflet to create and update incidents via the OAuth application.
- Your ServiceNow instance URL (e.g.,
- Click Save. You will be redirected to the ServiceNow OAuth portal. Click Allow to grant Sifflet access to your ServiceNow account.
Keep in mind that Sifflet will have the same permissions as the ServiceNow user who approves the OAuth request.

ServiceNow integration popup
The integration should now be created. If you see an error message instead of a success message, check the configuration settings for any problems. The error message will provide details to help you troubleshoot.
Creating incident templates
With your ServiceNow integration configured, you can use incident templates to customize the ServiceNow incidents created by Sifflet. Templates let you specify the values for various incident fields, ensuring each incident has the required context.

The incident template creation popup
Once you've defined the custom ServiceNow fields and their values within the template, click the Send test incident
button to test your configuration. This will create a sample incident in your ServiceNow environment, which you can delete after verifying that the process is working correctly.
Double-check that the test incident contains all the custom fields and their values
We highly recommend that you ensure the test incident contains all the values and custom fields specified in the template before saving.
Custom field value types
Ensure that the values you insert for the different custom fields match with the field's type in ServiceNow. In case of a type mismatch, the incident creation will fail.
Configuring Sifflet monitors to trigger ServiceNow incidents
Via the UI
When creating a new monitor or editing an existing one, use the 'Notification method' section to choose whether a ServiceNow incident should be created if the monitor fails. Here, you can also select the ServiceNow incident template the monitor will use.

Creating a ServiceNow incident in case of failure
Via Data-Quality-as-Code
When creating a new monitor or editing an existing one, using Sifflet's Data-Quality-as-Code YAML syntax, you can configure it to create ServiceNow incident by adding the following parameter:
- kind: ServiceNow
enabled: true
templateName: <Name of the ServiceNow template>
Interacting with ServiceNow incidents via Sifflet incidents
When a Sifflet incident is created, if the failing monitor is set up to create a corresponding ServiceNow incident, that ServiceNow incident will be created automatically. You'll see a dedicated button on the Sifflet incident page linking to the ServiceNow incident, and the creation event will be recorded in the Sifflet incident activity log.
Unlinking a ServiceNow incident
If you want to unlink a ServiceNow incident and a Sifflet incident, you can use the dedicated
Unlink ServiceNow incident
button:
Troubleshooting
A ServiceNow field I set in the template is empty in the Sifflet-created ServiceNow incident
If a field in a Sifflet-created ServiceNow incident is empty, even though you set a value in the template, verify that the value meets the ServiceNow field's requirements. These requirements may include more than just the value's type.
Updated 9 days ago