Integrate Google Cloud Platform (GCP) with Event Management by adding a standard webhook in the GCP console.

Before you begin

  • Ensure that the Event Management Connectors (sn_em_connector) plugin is installed on the Now Platform instance.
  • The Event Management plugin must be installed on the Now Platform instance.
  • Verify Configuration Items for the hosts managed by GCP exist in ServiceNow. These CIs can be physical or virtual, and can be either manually created or discovered using IP discovery or Cloud discovery.
  • The Event Management Connector plugin supports GCP alert data in JSON 1.2 format only.
  • Role required: evt_mgmt_integration

About this task

Configure the Event Management environment for the collection of events from GCP. In your GCP console, set your Now Platform instance as the rest endpoint using a standard webhook.

Procedure

  1. In the GCP console, add a webhook.
    1. Navigate to Monitoring > Alerting, and click Edit Notification Channels.
    2. In the Webhooks section, click Add New.
    3. Select the Use HTTP Basic Auth check box, and enter the user name and password of the relevant ServiceNow user.
      Note: Ensure that the selected user is assigned the evt_mgmt_integration role. To ensure proper authentication, use the least privileged user with the evt_mgmt_integration role, rather than a high privileged user.
    4. Enter the endpoint URL.
      For example, use https://<instance-name>.service-now.com/api/sn_em_connector/em/inbound_event?source=googlemonitor.
  2. In the GCP console, create an alerting policy.
    1. Navigate to Monitoring > Alerting, and click Create Policy.
    2. Configure policy conditions that initiate alerts when the conditions are violated.
    3. Select the webhook on which the problem should be notified.
    Note: If you need to directly open an incident in the GCP console from the alert, navigate to Quick Response (in Alert) > Show Incident in GCP Console.

Result

Alerts start flowing from GCP into the Event Management plugin. The plugin extracts information from the original GCP alert message to populate the required event fields and inserts the event into the database. In your Now Platform instance, navigate to All Events to see the events.

GCP does not send values such as the severity level in the payload. The default severity is Minor, which can be changed in the Push Connector Configuration section of Push Connectors > Google Monitor Push Connector. The valid values of severity are 1- Critical, 2- Major, 3- Minor, 4- Warning, and 5- Info.

Note:

To map the GCP hosts to the cmdb_ci_server record instead of cmdb_ci_vm_object, disable the Google Monitor - General event rule created for GCP. For further information about event rules, see Event rules.