Configure Rollup Records in Major Security Incident Management

  • Release version: Yokohama
  • Updated January 30, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Configure Rollup Records in Major Security Incident Management

    This feature in Major Security Incident Management allows you to configure how information from source records is aggregated ("rolled up") when these records are linked, proposed, or promoted as Major Security Incidents. Proper configuration helps ensure relevant data is accurately consolidated for effective incident management.

    Show full answer Show less

    Only users with the admin or snmsi.workspaceadmin roles can configure these settings, with system admins able to create configurations and MSI workspace admins able to update them.

    Configuration Process

    • Access Major Security Incident Response > Linked Records Configuration.
    • Select or create a linked record configuration.
    • In the Rollup Record Configuration section, create a new rollup record specifying the details.

    Key Configuration Fields

    • Name: Identifier for the rollup record.
    • Active: Enable to apply this rollup configuration.
    • Linked Record Configuration: Read-only unique identifier of the parent linked record configuration.
    • Source Table: Read-only field showing the source table involved.
    • Rollup Type:
      • Relationship: Data displayed as a related list; requires scripting to define rollup logic.
      • Reference: Data from a reference field on the source table form; allows mapping source and target fields.
    • Rollup Script: Enabled for Relationship type; lets you script how related data is rolled up into the linked record table.
    • Source Field: For Reference type; select the reference field on the source table to roll up.
    • Target Field: For Reference type; select the destination reference field on the linked record table to store rolled-up data.

    Rollup Script Details

    The script receives two input parameters:

    • sourceSysId: Sys ID of the source record being linked, proposed, or promoted.
    • msiSysId: Sys ID of the Major Security Incident to which the source record relates.

    The script should query related data using these IDs, then use the MSIRollupEngine utility to roll up the relevant information into the snmsim2mchild linked record table. No output is required from the script.

    Practical Benefits for ServiceNow Customers

    • Gain control over what specific information is aggregated when source records become part of a Major Security Incident.
    • Ensure consistent and relevant data presentation within the Major Security Incident workspace.
    • Leverage scripting flexibility to tailor data rollup logic to complex relationships.
    • Improve incident investigation and response efficiency by consolidating essential details automatically.

    Related Configurations

    • Configure Linked Records in Major Security Incident Management
    • Configure List Layout in Major Security Incident Management
    • Rollup example use case implementation for a Security Case
    • Perform on-demand atomic rollup

    Configure Roll up records in Major Security Incident Management to control the information, which will be rolled up when the source record is linked/proposed/promoted as Major Security Incidents.

    Role required: admin and sn_msi.workspace_admin.
    Note:
    The system admin can create the record and MSI workspace admin can update it.
    Procedure
    1. Navigate to Major Security Incident Response > Linked Records Configuration. The Linked Record Configurations page displays.
    2. Select or create a new linked record and navigate to the Roll up Record Configuration section from the same page.
      Figure 1. Rollup Record Configuration section
      Rollup record configuration
    3. Click New.

      Rollup record configuration page

    4. On the configuration page, fill the details.
      Table 1. Rollup Record Configuration
      Field Name Field Description
      Name Indicates the name of the rolling up record.
      Active Select this check box to implement the current configuration when rollup of source record happens.
      Linked Record Configuration Indicates a unique number, which refers to your parent linked records configuration and read-only.
      Source Table The source table name used in the Linked Record configuration, which is read-only.
      Rollup Type Describes the type of information which should be rolled up.
      • Relationship: Select this option if the data need to be present as a related list.
      • Reference: Select this option if the data is present as a reference field on the source table form.
      Rollup Script If the rollup type is: Relationship, then the Rollup Script field is enabled, which allows you to write script and can be used to rollup information.

      Here the script will receive the inputs which contains information of the source record and major security incident. The script should be able to find the information from the relationship tables and rollup to Linked Record (sn_msi_m2m_child) table.
      Source Field If the rollup type is: Reference, then the Source Field is available. This enables you to select the Source Table reference field which contains the information that needed to be rolled up.
      Target Field If the rollup type is: Reference, then the Target Field is available. This enables you to reference field from the Linked Record(sn_msi_m2m_child) table and will store the data which is present in the selected Source Field and in the Source Table record.

    Writing script for rollup

    Name Description
    Inputs
    • sourceSysId: Sys ID of source table record which is either getting linked / proposed / promoted.
    • msiSysId: Sys ID of major security incident to which source record is getting linked / proposed / promoted.
    Output No output return value.
    Responsibility Script should rollup information to Linked Record(sn_msi_m2m_child) table.
    • Use sourceSysID to query data from ServiceNow relationship tables.
    • After the data is fetched, roll up the data to a Linked Record (sn_msi_m2m_child) using MSIRollupEngine utility to roll up data.