Mapping Symantec DLP incident statuses with ServiceNow incident Status

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 1 min. de leitura

    • Synchronize the status of the DLP incidents ingested on the ServiceNow with the DLP incidents of the Symantec. Map the ServiceNow Incident Status field with the Symantec Incident Status field.

    Antes de Iniciar

    Role required: sn_dlir.admin

    Por Que e Quando Desempenhar Esta Tarefa

    The incident status is retrieved dynamically from the Symantec Endpoint Source which is added in the mapping. You need to perform a one-to-one incident status mapping.

    Procedimento

    1. Navigate to Symantec DLP integration > Incident Status mapping.
    2. Provide a Name to identify the mapping.
    3. Select the Source integration from where you want to fetch the status.
    4. Map the DLP Incident Status with Symantec Incident Status.
      Nota:
      It is not necessary to map all the states, you can map only the required states.
      Tabela 1. Symantec DLP Incident Status Mapping
      Field Description
      Name Name of the mapping record.
      Source The configured Symantec Endpoint source from where you want to fetch the incident status.
      DLP Incident Status List of Status of DLP incidents.
      Symantec Incident Status List of Status fetched from the Source (Symantec Endpoint).
      DLP Status mapping
    5. Click Submit.

    Resultado

    After successfully creating the record for mapping statuses of the ServiceNow incidents, the ServiceNow incidents status will be synced with Symantec DLP incidents status.

    If you change the status of any DLP incident on your ServiceNow instance, then the status of associated Symantec DLP incidents will be changed on the source Symantec platform based on the mapping set in the record.