About the ServiceNow Security Incident Response (SIR) Integration
ServiceNow Security Incident Response (SIR) is ServiceNow’s purpose-built security operations module, providing structured workflows for security incident triage, investigation, escalation, and resolution within the ServiceNow platform. Part of Synqly’s Ticketing Unified API, the ServiceNow SIR integration enables security platforms to create and manage security incidents programmatically through a normalized connector that leverages ServiceNow’s dedicated security incident model. Integrate with ServiceNow Security Incident Response to automatically create and route security incidents from detection tools into ServiceNow’s SIR workflows, enabling structured, trackable security operations at enterprise scale.
Integration Use Cases
Create Comment
Creates a comment on the ticket matching {ticketId} from the token-linked Integration.
Create Ticket
Creates a `Ticket` object in the token-linked Integration.
Delete Comment
Deletes the comment matching {commentId} form the ticket matching {ticketId} from the token-linked Integration.
Get Ticket
Returns a `Ticket` object matching `{ticketId}` from the token-linked `Integration`.
List Comments
Lists all comments for the ticket matching {ticketId} from the token-linked Integration.
List Remote Fields
List all remote fields for all Projects in a ticketing integration. The response will include a list of fields for each issue type in the ticketing provider.
Patch Ticket
Updates the `Ticket` object matching `{ticketId}` in the token-linked `Integration`.
Query Tickets
Returns a list of `Ticket` objects from the token-linked `Integration`.


