<field or ID>

ThreatStream investigation ID field or ThreatStream investigation ID.

Usage

You can use the snow operator to create or update an investigation in ServiceNow, provided ServiceNow has been integrated with your ThreatStream organization. The operator adds incident ID, incident sys_ID, and incident URL to results.

Examples

Example 1: Create or update ServiceNow incident with investigation ID number.

Example 2: Create or update ServiceNow incident with quoted investigation ID.

Example 3: Create or update ServiceNow incident with double-quoted investigation ID.

Example 4: Create or update ServiceNow incident using investigation ID field.