---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Configure an aggregation for source data

# Configure an aggregation for source data {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read

To analyze the performance of a specific facet in a business process that is recorded in a ServiceNow table, create an aggregation specific to the facet and create a report for this aggregation.

## Before you begin

Role required: sn_vul_cmn.admin

## Procedure

1. Navigate to AllAggregated ReportsAggregation definitionsAll and click New.
2. In the Name field, give the aggregation a descriptive name.
3. In the Description field, provide a brief description about the aggregation.
4. In the Source tab, fill in the fields.  
   {#configure-indicator-for-source-data__table_dgn_rwk_lvb__entry__2}

   | Field | Description |
   |-|-|
   | Table | Table from which you want to fetch the data for the report. This drop-down contains app sec common, app-vul, app-vulc, app-vul-container, and application vulnerability tables only. |
   | Aggregate function | Function to be applied to the column selected in Field. * Count: Number of records. * Sum: Total sum of the values in the column selected in Field. * Average: Average of all the values in a column selected in Field. * Maximum: Maximum value in the column selected in Field. * Minimum: Minimum value of the column selected in Field. * Count Distinct: Unique values in the column selected in Field. {#configure-indicator-for-source-data__ul_bdh_qdy_lvb} |
   | Field | Column on which you want to apply the function. Note: This field doesn't appear when you select Count in the Aggregate function field. |
   [Table 1. Source tab fields]

   {#configure-indicator-for-source-data__table_dgn_rwk_lvb}
5. In the Additional Conditions tab, provide the condition in the Conditions field to select a particular set of records for which you want to get the aggregated results.
6. In the Group By tab, select the columns of the table by which you want to group or stack the data.  
   You can select up to two breakdowns.

   If you select the date column in any group by field, the Trend by field appears. You can get the aggregation results that are categorized
   by week, day, minutes, etc by selecting the options in the Trend by field.
   {#configure-indicator-for-source-data__group-by}
7. In the Schedule tab, select or create an aggregation schedule, which defines the frequency at which you can execute the aggregation to fetch the data.  
   To create an aggregation schedule, see [Run multiple aggregations simultaneously](https://servicenow-prod.fluidtopics.net/eytJ03ZOPnhjJr32zlrJkQ "You can schedule the execution of multiple aggregations using a single Aggregation schedule.").  
   Note:  
   You cannot schedule the aggregation run for an inactive aggregation definition.
8. Click Submit to create the aggregation.  
   The aggregation appears in the Aggregation list. At the predefined frequency, the aggregation is executed, and a record is created along with an execution date and time in the Scheduled Runs related list for every execution.
9. Navigate to AllAggregated Results and open your aggregation to see the Aggregated Results and Scheduled Runs.  
   The aggregated results are listed in the Aggregated Results related list. If the aggregation run fails, see the Notes column in the Scheduled Runs related list for more information.
10. **Optional:** Select Execute Now to collect the aggregation results irrespective of the aggregation schedule.  
    If you terminate the scheduled run when it is in progress, then no changes are made to the aggregated results. You can also delete or deactivate an aggregation.
{#configure-indicator-for-source-data__steps_kqb_s2y_fzb}

## What to do next

Create a report using your aggregation. For more information about creating a report using an aggregation, see [Create a report using an aggregation](https://servicenow-prod.fluidtopics.net/FtRnNgKkXyIeTrn75S4ZtQ "To visualize and analyze the data specific to an aggregation that you created, generate a report by providing a condition for the aggregation in the condition builder.").
**Related concepts**   

* [Aggregated reports framework](https://servicenow-prod.fluidtopics.net/Yma_GGBdOn_D_Gxt0KQTGw "Using aggregated reports framework, you can create reports for the data that involves complex and long-running on-the-fly queries for better performance.")  
**Related tasks**   

* [Run multiple aggregations simultaneously](https://servicenow-prod.fluidtopics.net/eytJ03ZOPnhjJr32zlrJkQ "You can schedule the execution of multiple aggregations using a single Aggregation schedule.")
* [Configure the number of aggregations that can run simultaneously](https://servicenow-prod.fluidtopics.net/FjzYHJ7JkestNV3YFa5qqA "A new processor or a background job, Aggregated Reporting Framework Processor is shipped with the base system, which executes the scheduled jobs that are related to the Aggregated Reports Framework table. This enables the entire subsystem to run in the background, and it allows better utilization of system resources when they’re available.")
* [Create a report using an aggregation](https://servicenow-prod.fluidtopics.net/FtRnNgKkXyIeTrn75S4ZtQ "To visualize and analyze the data specific to an aggregation that you created, generate a report by providing a condition for the aggregation in the condition builder.")

*[\>]: and then