---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Security Operations Integrations - Get Network Statistics flow

# Security Operations Integrations - Get Network Statistics flow {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Security Operations Integrations - Get Network Statistics flow retrieves a list of active network connections from a host or endpoint.

## Before you begin

Role required: sn_si.analyst

## About this task

This flow runs automatically when a configuration item is added to a security incident.
Figure 1. Get Network Statistics

Actions specific to this flow are described here. For more information on other actions, see [Common Security Operations integration flows and orchestration activities](https://servicenow-prod.fluidtopics.net/VeHrUh9NzKmFfa~3wxWcqQ "Many of the flows associated with third-party integrations include the same activities. For example, activities for beginning and completing processing.").  
The flow actions include:

* [Capability - Determine CIs activity](https://servicenow-prod.fluidtopics.net/k21l3QFCU9WFMgt14Xd3ZA "The Capability - Determine CIs workflow activity determines which configuration items (CIs) to include in the workflow.")
* 
{#secops-integration-get-network-stats-workflow__ul_lf2_jwb_3cc} .
* **[Legacy: Execution Tracking - Begin (CIs) Flow Action](https://servicenow-prod.fluidtopics.net/km6zEwwRv_t2iYF6c9oEJQ)**   
  The Execution Tracking - Begin (CIs) flow action starts the auditing process for a Security Operations Integration flow that operates on configuration items (CIs).