ServiceNow + Slack
Responders live in Slack. High-priority incidents get posted to the on-call channel, and anyone can check an incident's state with a slash command instead of logging in.
Popular ideas
Get incidents created, found and reported without opening the instance. Bug reports and new vulnerabilities become incidents with the context filled in, P1 and P2 incidents reach your team chat, and anyone can pull up an incident's state from a slash command. Explain the workflow to your AI assistant, confirm the steps it lays out, and it runs on its own from then on.
Try asking
Create a ClickRuntime automation: every 6 hours, check the NVD feed for new critical CVEs that mention Apache Tomcat, Citrix or VMware, pull out the severity and affected product, and create a ServiceNow incident for each one.
Paste it into your assistant. It tells you what it will send or change before it runs live.
Ideas
Critical CVEs that mention software you run turn into incidents with severity and affected product filled in.
See how it worksTyping an incident number into a slash command replies with its state, priority and assignee.
See how it worksEach report your bug tool sends becomes an incident with the description, page URL and browser details.
See how it worksHigh-priority incidents show up in your chat channel within minutes of being logged.
See how it worksYou get an email when an incident assigned to you is updated, with what changed.
See how it worksA morning email shows how many incidents are open at each priority level.
See how it works Your own logicYour own rules, schedule and AI steps with ServiceNow, plus any other app. Describe it and your assistant builds it.
See how to build your ownBuild your own
Conditions, thresholds, filters and exceptions, written the way you'd explain them to a colleague.
One automation can read from one app and update several others. Over 248 apps are ready, and anything with an API works too.
Summaries, classification, extraction and drafts use ClickRuntime's built-in AI, with no extra key.
Runs as often as every 5 minutes, or the moment an app sends an event, and keeps track of what it already handled.
Every 15 minutes, check ServiceNow for P1 and P2 incidents that have no assignee after 20 minutes and send me their numbers and short descriptions.
When a P1 incident is opened in ServiceNow, post it to our #incidents Slack channel with the short description, assignment group and a link.
Every morning, pull open ServiceNow incidents older than 5 days, add them to a Google Sheets aging report, and post a summary per assignment group to Slack.
Works with
Responders live in Slack. High-priority incidents get posted to the on-call channel, and anyone can check an incident's state with a slash command instead of logging in.
Popular ideas
Name any of them when you ask your assistant, and your automation connects them. Over 248 apps are ready to go, and anything with an API works too.
Beyond chat
Instant
Look up an incident from a Slack commandThe moment it happens
On a schedule
Open incidents for new vulnerabilities in your productsEvery 6 hours
Watches for changes
Post P1 and P2 incidents to SlackEvery 5 minutes
Setup
Each ServiceNow instance is separate, so an instance admin sets up a REST API key tied to a service account. Basic auth with an integration user also works.
ServiceNow
IT service management
com.glide.tokenbased_auth plugin, go to System Web Services → API Access Policies → Inbound Authentication Profiles and create an API Key profile with the auth parameter x-sn-apikey: Auth Header.itil or rest_service, then open the record and click the lock icon to copy the token.<instance>.service-now.com address.Good to know
api_service_admin on newer releases.FAQ
Keep exploring