ServiceNow Nagios Integration Guide

// Event Rule Script for Nagios event processing
(function processNagiosEvent(event) {
    // Map Nagios states to ServiceNow severity
    var severityMap = {
        'CRITICAL': 1, 'DOWN': 1,
        'WARNING': 3, 'UNKNOWN': 3,
        'OK': 5, 'UP': 5
    };
    
    event.severity = severityMap[event.state] || 3;
    
    // Set event type based on Nagios notification type
    if (event.notification_type == 'HOST') {
        event.event_class = 'Infrastructure';
        event.resource = event.hostname;
    } else {
        event.event_class = 'Application';
        event.resource = event.hostname + ':' + event.service_desc;
    }
})(event);

#!/bin/bash
# ServiceNow Event Management notification script
SN_INSTANCE="https://yourinstance.service-now.com"
SN_USER="nagios.integration"
SN_PASS="your_password"

# Build JSON payload from Nagios macros
JSON_PAYLOAD=$(cat <<EOF
{
    "source": "nagios",
    "node": "$1",
    "type": "$2",
    "severity": "$3",
    "description": "$4",
    "state": "$5",
    "time_of_event": "$(date -u +%Y-%m-%d %H:%M:%S)"
}
EOF
)

# POST to ServiceNow Event Management API
curl -X POST "$SN_INSTANCE/api/now/table/em_event" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -u "$SN_USER:$SN_PASS" \
  -d "$JSON_PAYLOAD" \
  >> /var/log/nagios/servicenow.log 2>&1

# Host notification command for ServiceNow
define command {
    command_name    notify-host-by-servicenow
    command_line    /usr/local/bin/servicenow_notify.sh "$HOSTNAME$" "HOST" "$HOSTSTATE$" "Host $HOSTSTATE$: $HOSTOUTPUT$" "$HOSTSTATE$"
}

# Service notification command for ServiceNow
define command {
    command_name    notify-service-by-servicenow
    command_line    /usr/local/bin/servicenow_notify.sh "$HOSTNAME$" "SERVICE" "$SERVICESTATE$" "$SERVICEDESC$ $SERVICESTATE$: $SERVICEOUTPUT$" "$SERVICESTATE$"
}

# ServiceNow integration contact definition
define contact {
    contact_name                    servicenow-integration
    alias                          ServiceNow Event Management
    host_notification_period       24x7
    service_notification_period    24x7
    host_notification_options      d,u,r
    service_notification_options   w,u,c,r
    host_notification_commands     notify-host-by-servicenow
    service_notification_commands  notify-service-by-servicenow
    email                          nagios@yourcompany.com
}

# Contact group for ServiceNow integration
define contactgroup {
    contactgroup_name    servicenow-admins
    alias               ServiceNow Integration Group
    members             servicenow-integration
}

// Event correlation script for related Nagios events
(function correlateNagiosEvents(event) {
    var gr = new GlideRecord('em_event');
    gr.addQuery('source', 'nagios');
    gr.addQuery('node', event.node);
    gr.addQuery('state', 'New');
    gr.addQuery('sys_created_on', '>', gs.daysAgoStart(0));
    gr.query();
    
    if (gr.getRowCount() > 1) {
        // Correlate with existing events from same node
        event.correlation_id = event.node + '_' + gs.nowDateTime().getDisplayValue().substring(0,10);
        event.correlation_display = 'Multiple issues on ' + event.node;
    }
})(event);

// Business rule to acknowledge Nagios alerts when ServiceNow incident is assigned
(function executeRule(current, previous) {
    if (current.state == 2 && previous.state == 1) { // Assigned state
        var event = new GlideRecord('em_event');
        if (event.get(current.correlation_id)) {
            if (event.source == 'nagios') {
                var rm = new sn_ws.RESTMessageV2();
                rm.setEndpoint('https://nagios-server/nagiosxi/api/v1/objects/acknowledgement');
                rm.setHttpMethod('POST');
                rm.setBasicAuth('nagiosapi', 'password');
                
                var payload = {
                    'host_name': event.node.toString(),
                    'service_description': event.resource.toString(),
                    'comment': 'Acknowledged via ServiceNow incident ' + current.number
                };
                rm.setRequestBody(JSON.stringify(payload));
                rm.execute();
            }
        }
    }
})(current, previous);

// Integration health check script for scheduled execution
(function checkNagiosIntegrationHealth() {
    var eventCount = new GlideAggregate('em_event');
    eventCount.addQuery('source', 'nagios');
    eventCount.addQuery('sys_created_on', '>', gs.hoursAgoStart(1));
    eventCount.query();
    
    var recentEvents = eventCount.getRowCount();
    
    if (recentEvents == 0) {
        // No events received in past hour - alert administrators
        var incident = new GlideRecord('incident');
        incident.initialize();
        incident.short_description = 'Nagios integration health check failed';
        incident.description = 'No Nagios events received in the past hour. Check connectivity and notification commands.';
        incident.category = 'Software';
        incident.subcategory = 'Monitoring';
        incident.priority = 2;
        incident.assignment_group = 'IT Operations';
        incident.insert();
    }
})();