Get all Security Incidents

description retrieves all security incident records from servicenow, offering display customization and pagination options endpoint url /api/now/table/{{security incident}} method get inputs path parameters (object) – required security incident (string) – required name of the security incident table parameters (object) sysparm query (string) encoded query used to filter the result set you can use a ui filter to obtain a properly encoded query syntax sysparm query=\<col name>\<operator>\<value> example sysparm query number=inc0000040 sysparm display value (string) determines the type of data returned, either the actual values from the database or the display values of the fields display values are manipulated based on the actual value in the database and user or system settings and preferences valid values are true returns the display values for all fields false returns the actual values from the database all returns both actual and display values sysparm exclude reference link (boolean) flag that indicates whether to exclude table api links for reference fields valid values are true exclude table api links for reference fields false include table api links for reference fields sysparm fields (string) comma separated list of fields to return in the response sysparm limit (number) maximum number of records to return for requests that exceed this number of records, use the sysparm offset parameter to paginate record retrieval this limit is applied before acl evaluation if no records return, including records you have access to, rearrange the record order so records you have access to return first sysparm no count (boolean) flag that indicates whether to execute a select count( ) query on the table to return the number of rows in the associated table valid values are true do not execute a select count( ) false execute a select count( ) sysparm offset (number) starting record index for which to begin retrieving records use this value to paginate record retrieval this functionality enables the retrieval of all records, regardless of the number of records, in small manageable chunks for example, the first time you call this endpoint, sysparm offset is set to "0" to simply page through all available records, use sysparm offset=sysparm offset+sysparm limit, until you reach the end of all records don't pass a negative number in the sysparm offset parameter sysparm query category (string) name of the category to use for queries sysparm query no domain (boolean) flag that indicates whether to restrict the record search to only the domains for which the logged in user is configured valid values are false exclude the record if it is in a domain that the currently logged in user is not configured to access true include the record even if it is in a domain that the currently logged in user is not configured to access sysparm suppress pagination header (boolean) flag that indicates whether to remove the link header from the response the link header provides various urls to relative pages in the record set which you can use to paginate the returned record set valid values are true remove the link header from the response false do not remove the link header from the response sysparm view (string) ui view for which to render the data determines the fields returned in the response valid values are desktop, mobile, both if you also specify the sysparm fields parameter, it takes precedent output example \[ { "status code" 200, "response headers" { "server timing" "sem wait;dur=0, sesh wait;dur=0", "content encoding" "gzip", "x is logged in" "true", "x transaction id" "0a564c938322", "x total count" "1", "x content type options" "nosniff", "pragma" "no store,no cache", "cache control" "no cache,no store,must revalidate,max age= 1", "expires" "0", "content type" "application/json;charset=utf 8", "transfer encoding" "chunked", "date" "mon, 23 dec 2024 10 03 47 gmt", "keep alive" "timeout=70", "connection" "keep alive", "server" "servicenow", "set cookie" "jsessionid=47a85a3a36c9aae770c7a9d579538a40; path=/; httponly; samesite=none; secure, glide user=; max age=0; expires=thu, 01 jan 1970 00 00 10 gmt; path=/; secure; httponly; samesite=none; secure, glide user session=; max age=0; expires=thu, 01 jan 1970 00 00 10 gmt; path=/; secure; httponly; samesite=none; secure, glide user route=glide dd365af53b877647bfe3ca23d2bda88c; max age=2147483647; expires=sat, 10 jan 2093 13 17 54 gmt; path=/; secure; httponly; samesite=none; secure, glide node id for js=a4405af3dee08de0f8588f376b703f40b8fc9b61228796a63788e51f33976436; path=/; secure; samesite=none; secure, glide session store=c2568c93832252100d5e9d60ceaad38d; max age=1800; expires=mon, 23 dec 2024 10 33 47 gmt; path=/; secure; httponly; samesite=none; secure, bigipserverpool dev262724=2709626634 45630 0000; path=/; httponly; secure; samesite=none; secure", "strict transport security" "max age=63072000; includesubdomains" }, "reason" "ok", "json body" { "result" \[ { "parent" "", "made sla" "true", "watch list" "", "upon reject" "cancel", "sys updated on" "2016 01 19 04 52 04", "approval history" "", "number" "prb0000050", "sys updated by" "glide maint", "opened by" { "link" "https //instance servicenow\ com/api/now/table/sys user/glide maint", "value" "glide maint" }, "user input" "", "sys created on" "2016 01 19 04 51 19", "sys domain" { "link" "https //instance servicenow\ com/api/now/table/sys user group/global", "value" "global" }, "state" "4", "sys created by" "glide maint", "knowledge" "false", "order" "", "closed at" "2016 01 19 04 52 04", "cmdb ci" { "link" "https //instance servicenow\ com/api/now/table/cmdb ci/55b35562c0a8010e01cff22378e0aea9", "value" "55b35562c0a8010e01cff22378e0aea9" }, "delivery plan" "", "impact" "3", "active" "false", "work notes list" "", "business service" "", "priority" "4", "sys domain path" "/", "time worked" "", "expected start" "", "rejection goto" "", "opened at" "2016 01 19 04 49 47", "business duration" "1970 01 01 00 00 00", "group list" "", "work end" "", "approval set" "", "wf activity" "", "work notes" "", "short description" "switch occasionally drops connections", "correlation display" "", "delivery task" "", "work start" "", "assignment group" "", "additional assignee list" "", "description" "switch occasionally drops connections", "calendar duration" "1970 01 01 00 02 17", "close notes" "updated firmware", "sys class name" "problem", "closed by" "", "follow up" "", "sys id" "04ce72c9c0a8016600b5b7f75ac67b5b", "contact type" "phone", "urgency" "3", "company" "", "reassignment count" "", "activity due" "", "assigned to" "", "comments" "", "approval" "not requested", "sla due" "", "comments and work notes" "", "due date" "", "sys mod count" "1", "sys tags" "", "escalation" "0", "upon approval" "proceed", "correlation id" "", "location" "" } ] } } ] output parameters status code (number) reason (string) json body (object) result (array) parent (string) made sla (string) watch list (string) upon reject (string) sys updated on (string) approval history (string) number (string) sys updated by (string) opened by (object) link (string) value (string) user input (string) sys created on (string) sys domain (object) link (string) value (string) state (string) sys created by (string) knowledge (string) order (string) closed at (string) cmdb ci (object) link (string) value (string) delivery plan (string) impact (string) active (string) work notes list (string) business service (string) priority (string) sys domain path (string) time worked (string) expected start (string) rejection goto (string) opened at (string) business duration (string) group list (string) work end (string) approval set (string) wf activity (string) work notes (string) short description (string) correlation display (string) delivery task (string) work start (string) assignment group (string) additional assignee list (string) description (string) calendar duration (string) close notes (string) sys class name (string) closed by (string) follow up (string) sys id (string) contact type (string) urgency (string) company (string) reassignment count (string) activity due (string) assigned to (string) comments (string) approval (string) sla due (string) comments and work notes (string) due date (string) sys mod count (string) sys tags (string) escalation (string) upon approval (string) correlation id (string) location (string) response headers header type server timing string content encoding string x is logged in string x transaction id string x total count string x content type options string pragma string cache control string expires string content type string transfer encoding string date string keep alive string connection string server string set cookie string strict transport security string