ServiceNow Cloudflare Integration Guide

(function process(request, response) {
    try {
        var payload = request.body.data;
        var eventType = payload.outcome || 'unknown';
        
        // Create incident for security events
        var incident = new GlideRecord('incident');
        incident.initialize();
        incident.short_description = 'Cloudflare Security Event: ' + eventType;
        incident.description = 'Event details: ' + JSON.stringify(payload);
        incident.category = 'Security';
        incident.subcategory = 'Web Application Firewall';
        incident.priority = payload.action === 'block' ? 2 : 4;
        incident.caller_id = gs.getProperty('cloudflare.default_caller');
        var incidentSysId = incident.insert();
        
        response.setStatus(200);
        response.getWriter().print(JSON.stringify({status: 'success', incident: incidentSysId}));
    } catch (e) {
        response.setStatus(500);
        response.getWriter().print(JSON.stringify({error: e.message}));
        gs.error('Cloudflare webhook processing error: ' + e.message);
    }
})(request, response);

// Example function to get Cloudflare zones
function getCloudflareZones() {
    try {
        var request = new sn_ws.RESTMessageV2('Cloudflare API Client', 'get zones');
        var response = request.execute();
        
        if (response.getStatusCode() === 200) {
            var zones = JSON.parse(response.getBody());
            return zones.result;
        } else if (response.getStatusCode() === 429) {
            gs.warn('Cloudflare API rate limit exceeded');
            return null;
        } else {
            gs.error('Cloudflare API error: ' + response.getStatusCode() + ' - ' + response.getBody());
            return null;
        }
    } catch (e) {
        gs.error('Error calling Cloudflare API: ' + e.message);
        return null;
    }
}

// Scheduled job script for CMDB sync
var CloudflareSync = {
    syncZones: function() {
        var zones = this.getCloudflareZones();
        if (!zones) return;
        
        for (var i = 0; i < zones.length; i++) {
            var zone = zones[i];
            var zoneCi = new GlideRecord('u_cloudflare_zone');
            zoneCi.addQuery('u_zone_id', zone.id);
            zoneCi.query();
            
            if (zoneCi.next()) {
                // Update existing zone
                zoneCi.u_zone_status = zone.status;
                zoneCi.u_name_servers = zone.name_servers.join(',');
                zoneCi.update();
            } else {
                // Create new zone CI
                zoneCi.initialize();
                zoneCi.u_zone_id = zone.id;
                zoneCi.u_zone_name = zone.name;
                zoneCi.u_zone_status = zone.status;
                zoneCi.name = 'Cloudflare Zone: ' + zone.name;
                zoneCi.insert();
            }
            
            // Sync DNS records for this zone
            this.syncDnsRecords(zone.id, zoneCi.sys_id);
        }
    },
    
    getCloudflareZones: function() {
        // Implementation from previous step
    }
};

CloudflareSync.syncZones();

// Test script to validate Cloudflare integration
var testIntegration = function() {
    // Test outbound API connectivity
    var zones = getCloudflareZones();
    if (zones && zones.length > 0) {
        gs.info('Successfully retrieved ' + zones.length + ' zones from Cloudflare API');
    } else {
        gs.error('Failed to retrieve zones from Cloudflare API');
        return false;
    }
    
    // Verify webhook endpoint is accessible
    var testPayload = {
        outcome: 'block',
        action: 'block',
        source: 'firewallrules',
        description: 'Integration test event'
    };
    
    // Check if recent incidents were created from webhooks
    var recentIncidents = new GlideRecord('incident');
    recentIncidents.addQuery('short_description', 'STARTSWITH', 'Cloudflare Security Event');
    recentIncidents.addQuery('sys_created_on', '>', gs.hoursAgo(1));
    recentIncidents.query();
    
    gs.info('Found ' + recentIncidents.getRowCount() + ' recent Cloudflare incidents');
    return true;
};

testIntegration();