Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.
Versions
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store
Close

AutoFocus Search Session activity

AutoFocus Search Session activity

The AutoFocus Search Session workflow activity uploads information from an IP address assigned to a security incident to AutoFocus and queues it for a search query. When the activity executes, it queues a search query with AutoFocus for gathering information for a specified source IP. If AutoFocus has previously identified sessions originating from that IP address, a JSON-formatted report is returned.

Input variables

Input variables determine the initial behavior of the activity.

Table 1. Input variables
Variable Description
searchSessionQuery [string] The search query for session information.

Output variables

The output variables contain data that can be used in subsequent activities.

Table 2. Output variables
Variable Description
requestStatus [Boolean] True if a search query was scheduled for execution in AutoFocus.
error [string] The error, if any, that occurred in the activity.
afcookie [string] An identifier for the AutoFocus search query used by the Fetch Search Results activity to retrieve the search results.

Updates to site content will be made starting around 4am on January 17th (Pacific Time) and lasting approximately 6 hours.  This site may be intermittently unavailable.