Create Security Incident

description creates a new security incident in servicenow based on the provided path parameters endpoint url /api/now/table/{{security incident}} method post inputs path parameters (object) – required security incident (string) – required name of the security incident table json body (object) sysparm display value (string) determines the type of data returned, either the actual values from the database or the display values of the fields sysparm exclude reference link (boolean) flag that indicates whether to exclude table api links for reference fields sysparm fields (string) comma separated list of fields to return in the response sysparm input display value (boolean) flag that indicates whether to set field values using the display value or the actual value sysparm view (string) if you also specify the sysparm fields parameter, it takes precedent output example \[ { "status code" 201, "response headers" { "set cookie" "jsessionid=65cfeb1152b06972dd21833afe556414; path=/; httponly;secure, glide user=; max age=0; expires=thu, 01 jan 1970 00 00 10 gmt; path=/; secure; httponly, glide user session=; max age=0; expires=thu, 01 jan 1970 00 00 10 gmt; path=/; secure; httponly, glide user route=glide 0523df0e933b3d0b61bd3203715792eb; max age=2147483647; expires=sat, 25 aug 2091 14 13 46 gmt; path=/; secure; httponly, glide session store=2ad13c4147203110d737cd9bd36d43a3; max age=1800; expires=mon, 07 aug 2023 11 29 39 gmt; path=/; secure; httponly, bigipserverpool dev60827=999184138 46398 0000; path=/; httponly; secure", "server timing" "sem wait;dur=0, sesh wait;dur=0", "content encoding" "gzip", "x is logged in" "true", "x transaction id" "6ed13c41a300", "location" "https //dev60827 service now\ com/api/now/v2/table/incident/26d1744d47603110d737cd9bd36d436b", "x content type options" "nosniff", "pragma" "no store,no cache", "cache control" "no cache,no store,must revalidate,max age= 1", "expires" "0", "content type" "application/json;charset=utf 8", "transfer encoding" "chunked", "date" "mon, 07 aug 2023 10 59 39 gmt", "keep alive" "timeout=70", "connection" "keep alive", "server" "servicenow", "strict transport security" "max age=63072000; includesubdomains" }, "reason" "created", "json body" { "result" { "parent" "", "made sla" "true", "caused by" "", "watch list" "", "upon reject" "cancel", "sys updated on" "2023 08 07 10 59 39", "child incidents" "0", "hold reason" "", "origin table" "", "task effective number" "inc0010006", "approval history" "", "number" "inc0010006", "resolved by" "", "sys updated by" "admin", "opened by" { "link" "https //dev60827 service now\ com/api/now/v2/table/sys user/6816f79cc0a8016401c5a33be04be441", "value" "6816f79cc0a8016401c5a33be04be441" }, "user input" "", "sys created on" "2023 08 07 10 59 39", "sys domain" { "link" "https //dev60827 service now\ com/api/now/v2/table/sys user group/global", "value" "global" }, "state" "1", "route reason" "", "sys created by" "admin", "knowledge" "false", "order" "", "calendar stc" "", "closed at" "", "cmdb ci" "", "delivery plan" "", "contract" "", "impact" "3", "active" "true", "work notes list" "", "business service" "", "business impact" "", "priority" "5", "sys domain path" "/", "rfc" "", "time worked" "", "expected start" "", "opened at" "2023 08 07 10 59 39", "business duration" "", "group list" "", "work end" "", "caller id" "", "reopened time" "", "resolved at" "", "approval set" "", "subcategory" "", "work notes" "", "universal request" "", "short description" "", "close code" "", "correlation display" "", "delivery task" "", "work start" "", "assignment group" "", "additional assignee list" "", "business stc" "", "cause" "", "description" "", "origin id" "", "calendar duration" "", "close notes" "", "notify" "1", "service offering" "", "sys class name" "incident", "closed by" "", "follow up" "", "parent incident" "", "sys id" "26d1744d47603110d737cd9bd36d436b", "contact type" "", "reopened by" "", "incident state" "1", "urgency" "3", "problem id" "", "company" "", "reassignment count" "0", "activity due" "", "assigned to" "", "severity" "3", "comments" "", "approval" "not requested", "sla due" "", "comments and work notes" "", "due date" "", "sys mod count" "0", "reopen count" "0", "sys tags" "", "escalation" "0", "upon approval" "proceed", "correlation id" "", "location" "", "category" "inquiry" } } } ] output parameters status code (number) reason (string) json body (object) result (object) parent (string) made sla (string) caused by (string) watch list (string) upon reject (string) sys updated on (string) child incidents (string) hold reason (string) origin table (string) task effective number (string) approval history (string) number (string) resolved by (string) sys updated by (string) opened by (object) link (string) value (string) user input (string) sys created on (string) sys domain (object) link (string) value (string) state (string) route reason (string) sys created by (string) knowledge (string) order (string) calendar stc (string) closed at (string) cmdb ci (string) delivery plan (string) contract (string) impact (string) active (string) work notes list (string) business service (string) business impact (string) priority (string) sys domain path (string) rfc (string) time worked (string) expected start (string) opened at (string) business duration (string) group list (string) work end (string) caller id (string) reopened time (string) resolved at (string) approval set (string) subcategory (string) work notes (string) universal request (string) short description (string) close code (string) correlation display (string) delivery task (string) work start (string) assignment group (string) additional assignee list (string) business stc (string) cause (string) description (string) origin id (string) calendar duration (string) close notes (string) notify (string) service offering (string) sys class name (string) closed by (string) follow up (string) parent incident (string) sys id (string) contact type (string) reopened by (string) incident state (string) urgency (string) problem id (string) company (string) reassignment count (string) activity due (string) assigned to (string) severity (string) comments (string) approval (string) sla due (string) comments and work notes (string) due date (string) sys mod count (string) reopen count (string) sys tags (string) escalation (string) upon approval (string) correlation id (string) location (string) category (string) response headers header type set cookie string server timing string content encoding string x is logged in string x transaction id string location string x content type options string pragma string cache control string expires string content type string transfer encoding string date string keep alive string connection string server string strict transport security string