Create Security Operations field value transforms

Field Value Transforms defines one transformation between provided source data, and the replacement value to use.

Before you begin

Role required: sn_sec_cmn.basic or sn_si.basic

About this task

Define each transformation entry to apply either when there is a match to the search value, or when the search value is contained within the provided source data, or when no matches are found. Set a default value for when no match is found. If no default value is set, and no matches are found, the original source data is used.


  1. Navigate to Security Operations > Utilities > Field Value Transforms.
  2. Click New.
  3. Fill in the fields on the form, as appropriate.
    Table 1. Field value transforms
    Field Description
    Name The name of the field value transform.
    Description Description for the field map.
    Field Value Transform Entries The table list of entries.
    1. Under Replace data, double-click Insert a new row.
    2. Choose one of the following options:
      • When the date for this field matches
      • When the data for this field contains
      • When no other transform entry matches the data (default)
    3. Click the green check mark.
    4. Double-click under Search value, add your search value.
    5. Click the green check mark.
    6. Double-click under Replacement value add the ServiceNow corresponding value.
    7. Repeat if necessary.
    Active Select this check box to activate the transform.
    Application Scope of the application.
  4. Click Submit.