---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Sightings Search - Determine Observables activity

# Sightings Search -
Determine Observables activity {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Sightings Search - Determine Observables workflow activity
determines which observables to include in the workflow.
The Sightings Search - Determine Observables activity can be used
with any workflow to determine which observables to include in the workflow.

## Results

Possible results for this activity are:
{#determine-observables-sightings-search-activity__table_lg3_dm5_vy__entry__2}

| Result | Description |
|-|-|
| Success | Found observables |
| Failure | No observables found. More error information is available in the activity output error. |
[Table 1. Results]

{#determine-observables-sightings-search-activity__table_lg3_dm5_vy}

## Input variables {#determine-observables-sightings-search-activity__section_cqw_y2m_3z}

Input variables determine the initial behavior of the activity.
{#determine-observables-sightings-search-activity__table_pgm_tfy_jr__entry__2}

| Variable | Description |
|-|-|
| task_sys_id | Task identifier (maps security incident to observables). |
| observables | IP addresses, hash, URLs, domain names. |
| workflow_current_sys_id | System identifier of the current record. (Used only if `task_sys_id`, observable inputs are not available). |
[ ]

{#determine-observables-sightings-search-activity__table_pgm_tfy_jr}

## Output variables

The output variables contain data that can be used in subsequent activities.
{#determine-observables-sightings-search-activity__table_bnj_jfy_jr__entry__2}

| Variable | Description |
|-|-|
| observables | Filtered observables |
[Table 2. Output variables]

{#determine-observables-sightings-search-activity__table_bnj_jfy_jr}