To analyze the performance of a specific facet in a business process that is recorded in a ServiceNow table, create an aggregation specific to the facet and create a report for this aggregation.

Before you begin

Role required: sn_vul_cmn.admin

Procedure

  1. Navigate to All > Aggregated Reports > Aggregation definitions > All and click New.
  2. In the Name field, give the aggregation a descriptive name.
  3. In the Description field, provide a brief description about the aggregation.
  4. In the Source tab, fill in the fields.
    Table 1. Source tab fields
    Field Description
    Table Table from which you want to fetch the data for the report. This drop-down contains app sec common, app-vul, app-vulc, app-vul-container, and application vulnerability tables only.
    Aggregate function Function to be applied to the column selected in Field.
    • Count: Number of records.
    • Sum: Total sum of the values in the column selected in Field.
    • Average: Average of all the values in a column selected in Field.
    • Maximum: Maximum value in the column selected in Field.
    • Minimum: Minimum value of the column selected in Field.
    • Count Distinct: Unique values in the column selected in Field.
    Field Column on which you want to apply the function.
    Note: This field doesn't appear when you select Count in the Aggregate function field.
  5. In the Additional Conditions tab, provide the condition in the Conditions field to select a particular set of records for which you want to get the aggregated results.
  6. In the Group By tab, select the columns of the table by which you want to group or stack the data.
    You can select up to two breakdowns.

    If you select the date column in any group by field, the Trend by field appears. You can get the aggregation results that are categorized by week, day, minutes, etc by selecting the options in the Trend by field.

  7. In the Schedule tab, select or create an aggregation schedule, which defines the frequency at which you can execute the aggregation to fetch the data.
    To create an aggregation schedule, see Run multiple aggregations simultaneously.
    Note: You cannot schedule the aggregation run for an inactive aggregation definition.
  8. Click Submit to create the aggregation.
    The aggregation appears in the Aggregation list. At the predefined frequency, the aggregation is executed, and a record is created along with an execution date and time in the Scheduled Runs related list for every execution.
  9. Navigate to All > Aggregated Results and open your aggregation to see the Aggregated Results and Scheduled Runs.
    The aggregated results are listed in the Aggregated Results related list. If the aggregation run fails, see the Notes column in the Scheduled Runs related list for more information.
  10. (Optional) Select Execute Now to collect the aggregation results irrespective of the aggregation schedule.
    If you terminate the scheduled run when it is in progress, then no changes are made to the aggregated results. You can also delete or deactivate an aggregation.

What to do next

Create a report using your aggregation. For more information about creating a report using an aggregation, see Create a report using an aggregation.