Integrations

ServiceNow VMware Integration Guide

advancedBasic Authentication with VMware vSphere service account credentialsVMware vSphere

ServiceNow's VMware vSphere integration provides comprehensive discovery and monitoring capabilities for virtual infrastructure, enabling organizations to automatically populate their CMDB with VMs, ESX hosts, clusters, and datastores while correlating events and performance data. This integration is primarily used by IT operations teams, infrastructure engineers, and service managers who need complete visibility into their virtualized environments within ServiceNow's ITSM processes. The integration supports bi-directional data flows through ITOM Discovery patterns that continuously discover and update VMware infrastructure as Configuration Items (CIs), while Event Management captures vCenter alarms and converts them into ServiceNow events. The primary automation patterns include scheduled discovery runs, real-time event forwarding, and CI relationship mapping, all orchestrated through ServiceNow's ITOM modules including Discovery, Event Management, and the VMware vRealize Operations spoke.

Prerequisites

  • ServiceNow Quebec or later with ITOM Discovery plugin activated
  • Integration Hub Professional license for vRealize Operations spoke
  • VMware vSphere 6.5 or later with vCenter Server
  • MID Server with network connectivity to vCenter and ESX hosts
  • VMware vSphere API read-only credentials or higher
  • Event Management plugin installed and configured
  • VMware vRealize Operations Manager 7.0 or later (optional for advanced monitoring)

Architecture Overview

The integration leverages ServiceNow's ITOM Discovery engine with built-in VMware discovery patterns that connect to vCenter Server via SOAP and REST APIs through a MID Server deployment. Authentication is established using VMware vSphere credentials stored in ServiceNow's Discovery Credentials table, with the MID Server acting as a secure proxy between ServiceNow and the VMware infrastructure. Data flows uni-directionally from VMware to ServiceNow during scheduled discovery runs, with real-time event data flowing through Event Management connectors that process vCenter alarms and convert them into ServiceNow events. A MID Server is required because it performs the actual discovery probes and API calls to VMware infrastructure, handles credential management securely, and processes discovery payloads before sending them to the ServiceNow instance. The VMware vRealize Operations spoke in Integration Hub provides additional bi-directional capabilities for performance metrics and health status, with rate limiting considerations around vCenter API calls (typically 100-200 concurrent sessions) and discovery schedule optimization to prevent resource exhaustion.

Sourdough
Chrome Extension

Sourdough: ServiceNow Monitoring and Analytics

A Chrome extension for ServiceNow Admins and Developers with essential tools, analytics, graphs and monitoring features.

Instance HealthGraphs & ChartsAPI HealthDeveloper ToolsQuick SearchInstance Switcher
Add to Chrome

Free to install. Pro $5/month after a 14-day no-card trial.
Pro requires the ServiceNow admin role. Upgrade inside the extension.

Overview
Tasks
CMDB
API
Metrics
Monitor
Internals
Instance:sourdoughdev·Version:Yokohama
Instance StateONLINE
System StatusFully Operational
Session Timeout90 minutes
Logged-In Sessions2 (20 active)
Build Nameyokohama-12-18-2024_p1
IP Address10.159.128.43
Instance HealthHealth Score: 90%
🔥 5dSourdough (Chrome Plugin)Dark Mode

Implementation Steps

1

Create VMware vSphere credentials in ServiceNow Discovery

Navigate to Discovery > Credentials and click New to create a VMware credential record. Select 'VMware' as the credential type and enter your vCenter Server service account username and password with appropriate read permissions. Set the credential name to something descriptive like 'vCenter-Production-Readonly' and ensure the 'Active' checkbox is selected. Test the credential connectivity using the Test Credential functionality to verify the MID Server can authenticate to vCenter Server before proceeding.

2

Configure MID Server for VMware discovery capabilities

Navigate to MID Server > Servers and select your target MID Server, then verify that the 'VMware' capability is enabled in the Capabilities related list. If the capability is missing, add it manually by clicking New in the Capabilities section and selecting 'VMware' from the available options. Restart the MID Server service to ensure the VMware discovery probes are loaded and available. Verify MID Server connectivity to your vCenter Server by checking the MID Server logs for any network or firewall issues that might prevent API access.

3

Create and configure VMware discovery schedule

Navigate to Discovery > Discovery Schedules and create a new schedule specifically for VMware infrastructure discovery. Enter your vCenter Server IP address or FQDN in the IP ranges field, select the VMware credentials created in step 1, and choose your configured MID Server. Configure the discovery to run daily during off-peak hours and select the appropriate VMware discovery patterns including 'VMware vCenter' and 'VMware ESX Server' patterns. Set behavioral parameters such as the maximum number of VMs to discover per run to prevent performance issues during initial discovery.

4

Configure VMware discovery patterns and identification rules

Navigate to Discovery > Discovery Patterns and locate the VMware vCenter pattern to review and customize discovery behavior. Configure the pattern to include specific ESX clusters, datastores, and resource pools based on your organizational needs by modifying the pattern's probe parameters. Set up CI identification rules by navigating to Discovery > CI Identification Rules and ensure that VMware CIs are properly identified and deduplicated based on VMware UUID and instance UUID fields. Test the pattern configuration by running a limited discovery against a small subset of your VMware environment to validate CI creation and relationship mapping.

5

Configure Event Management for vCenter alarm integration

Navigate to Event Management > Event Rules and create rules to process VMware-specific events from vCenter alarm notifications. Install and configure the VMware Event Connector by navigating to Event Management > Connectors and setting up a new VMware connector with your vCenter Server details and the same credentials used for discovery. Configure event processing rules to map vCenter alarm severity levels to ServiceNow event severity and set up automatic incident creation for critical infrastructure events. Test the event connector by generating a test alarm in vCenter and verifying that the corresponding event appears in the ServiceNow Event Management console.

6

Install and configure VMware vRealize Operations spoke

Navigate to System Applications > All Available Applications > All and search for the VMware vRealize Operations spoke in the ServiceNow Store. Install the spoke and navigate to Integration Hub > Connections to create a new connection for vRealize Operations using the Connection and Credential Alias pattern. Configure the connection with your vRealize Operations Manager server URL and authentication credentials, then test the connection to ensure API connectivity. Create a new Flow using the vRealize Operations actions to pull performance metrics and health status data for integration with ServiceNow Performance Analytics or custom dashboards.

ServiceNow Script
// Example Flow script step to retrieve VM performance data
(function execute(inputs, outputs) {
    var connection = inputs.connection;
    var resourceId = inputs.vm_resource_id;
    
    // Call vRealize Operations API to get VM metrics
    var vrops = new sn_vrops.vRealizeOperationsClient(connection);
    var metrics = vrops.getResourceMetrics(resourceId, {
        'statKey': ['cpu|usage_average', 'mem|usage_average'],
        'begin': inputs.start_time,
        'end': inputs.end_time
    });
    
    outputs.performance_data = metrics;
    outputs.status = 'success';
})(inputs, outputs);
7

Execute initial discovery and validate CI population

Navigate to Discovery > Discovery Status and manually trigger your VMware discovery schedule to perform the initial infrastructure discovery. Monitor the discovery progress in real-time through the Discovery Status page and check for any error conditions or probe failures that might indicate connectivity or permission issues. Once discovery completes, navigate to Configuration > Servers > Virtual Machine Instances to verify that VMware VMs have been discovered and populated as CIs with proper relationships to ESX hosts and clusters. Validate that CI relationships are correctly mapped by viewing the CI dependency maps for discovered VMware infrastructure components.

8

Test end-to-end integration and monitoring workflows

Create a test scenario by generating a VM resource alarm in vCenter and verifying that it flows through Event Management into ServiceNow as an event record. Test the discovery update process by making changes to VM configurations in vCenter and running an incremental discovery to verify that CI attributes are properly updated. Validate integration workflows by creating a ServiceNow incident and using the VMware CI information to populate CMDB relationships and affected services. Set up monitoring dashboards using Performance Analytics or custom reports to track VMware infrastructure health metrics and discovery success rates over time.

ServiceNow Script
// Script to validate VMware CI relationships
(function() {
    var gr = new GlideRecord('cmdb_ci_vmware_instance');
    gr.addQuery('install_status', 'Installed');
    gr.query();
    
    var validationResults = [];
    while (gr.next()) {
        var relGr = new GlideRecord('cmdb_rel_ci');
        relGr.addQuery('child', gr.sys_id);
        relGr.addQuery('type.name', 'Hosted on::Hosts');
        relGr.query();
        
        if (!relGr.hasNext()) {
            validationResults.push({
                vm_name: gr.name.toString(),
                issue: 'Missing host relationship'
            });
        }
    }
    
    gs.info('VMware CI validation results: ' + JSON.stringify(validationResults));
})();

Common Use Cases

Automated VM lifecycle management for ITSM processes

ServiceNow automatically discovers new VMs as they're provisioned in vSphere and creates corresponding CI records with proper relationships to hosts and clusters. When VMs are decommissioned or moved between hosts, discovery updates maintain accurate CMDB data for change management and incident response. This enables automatic impact analysis during incidents and ensures that service mapping accurately reflects the current virtual infrastructure state. IT teams can track VM sprawl, optimize resource allocation, and maintain compliance with configuration management policies through integrated CMDB and ITSM workflows.

Real-time infrastructure alerting and incident automation

vCenter alarms for critical conditions like host failures, datastore capacity issues, or VM performance degradation automatically create events in ServiceNow Event Management. Event correlation rules process multiple related alarms to prevent alert storms and automatically generate incidents for critical infrastructure issues. ServiceNow can automatically assign incidents to appropriate teams based on affected CIs and trigger notification workflows to escalate critical issues. This integration enables proactive infrastructure monitoring with automatic incident creation and escalation based on VMware infrastructure health conditions.

Service impact analysis for virtual infrastructure

When VMware infrastructure issues occur, ServiceNow uses CI relationships discovered from vSphere to automatically identify affected business services and applications. Service mapping leverages VMware host-to-VM relationships to understand blast radius during planned maintenance or unplanned outages. Change advisory board reviews can include automated impact assessments based on current VM placement and dependencies discovered from vCenter. This enables precise communication to affected users and helps prioritize remediation efforts based on business service criticality rather than just technical severity.

Performance monitoring and capacity planning integration

The vRealize Operations spoke pulls performance metrics and health scores from VMware infrastructure into ServiceNow Performance Analytics dashboards. Capacity planning workflows use VM resource utilization data to trigger automated requests for additional infrastructure when thresholds are exceeded. Performance degradation patterns identified in vRealize Operations automatically create ServiceNow events that can trigger proactive maintenance workflows. IT operations teams can correlate performance issues with incident patterns and change history to identify root causes and optimize virtual infrastructure performance.

Compliance reporting and configuration auditing

ServiceNow discovery maintains detailed records of VMware configuration items including VM specifications, host configurations, and cluster settings for compliance auditing. Automated compliance checks compare discovered VMware configurations against organizational standards and create policy violation records when deviations are detected. Regular discovery runs track configuration drift in VMware environments and generate reports for security and compliance teams. This enables continuous compliance monitoring with automated reporting for audits and regulatory requirements while maintaining detailed change history for all VMware infrastructure components.

Troubleshooting

Discovery fails with 'Authentication failed' errors in MID Server logs

First, verify that the VMware credentials are correctly entered in the Discovery Credentials table with the proper username format (domain\username for AD accounts or just username for local vCenter accounts). Test credential connectivity using the built-in credential test feature and ensure the service account has the minimum required permissions including read access to vCenter inventory objects. Check MID Server logs for specific authentication error details and verify that the vCenter Server certificate is trusted by the MID Server if using HTTPS connections. If using domain accounts, ensure the MID Server can resolve the Active Directory domain and that there are no account lockout policies affecting the service account.

VMware VMs discovered but missing relationships to ESX hosts

Verify that the VMware discovery patterns include both 'VMware vCenter' and 'VMware ESX Server' patterns and that they are running in the correct sequence with proper dependencies. Check the Discovery Log for any probe failures related to host discovery and ensure that the MID Server has network connectivity to individual ESX hosts, not just vCenter Server. Review the CI Identification Rules for VMware host and VM classes to ensure they are properly matching on VMware UUID fields rather than potentially changing attributes like IP addresses. Manually run the VMware host discovery probe against a specific ESX host to isolate connectivity or permission issues that might prevent host CI creation.

vCenter events not appearing in ServiceNow Event Management

Verify that the VMware Event Connector is properly configured with the correct vCenter Server URL and authentication credentials, and check the connector status in Event Management > Connectors for any error messages. Ensure that vCenter Server is configured to send alarm notifications to the ServiceNow event collector endpoint and that firewall rules allow outbound HTTPS connections from vCenter to ServiceNow. Test event flow by manually triggering a test alarm in vCenter and monitoring the Event Management input queue for incoming events. Review event transformation rules to ensure vCenter alarm formats are properly mapped to ServiceNow event fields and that required field mappings are not causing event processing failures.

Discovery performance issues with large VMware environments

Implement discovery schedule optimization by creating multiple targeted discovery schedules for different vCenter clusters or geographic locations rather than discovering the entire environment in a single schedule. Configure discovery behavioral parameters to limit the number of VMs discovered per run and implement incremental discovery patterns that focus on changes rather than full inventory scans. Review MID Server resource allocation and consider deploying additional MID Servers with load balancing for large-scale VMware discovery operations. Monitor vCenter Server API performance during discovery runs and adjust discovery timing to avoid peak usage periods when vCenter might be under heavy load from other management tools.

vRealize Operations spoke connection failures or timeout errors

Verify that the vRealize Operations Manager server is accessible from the ServiceNow instance and that API endpoints are responding properly by testing the connection manually from the Connections interface. Check for proper SSL certificate configuration if using HTTPS and ensure that vRealize Operations API authentication tokens are not expired or revoked. Review Integration Hub execution logs for specific error details and increase timeout values in the spoke configuration if network latency is causing premature timeouts. Validate that the vRealize Operations user account has sufficient permissions to access performance metrics APIs and that any required licenses are properly assigned for API access.

Duplicate CI records created for VMware infrastructure components

Review and update CI Identification Rules for VMware CI classes to ensure they are using stable VMware identifiers like instance UUID and BIOS UUID rather than changing attributes like hostname or IP address. Check for multiple discovery schedules targeting the same VMware infrastructure and consolidate them to prevent overlapping discovery that creates duplicate records. Verify that discovery behavioral parameters are properly configured to update existing CIs rather than always creating new ones, and review the Discovery Reconciliation settings for VMware patterns. Run the CI duplicate detection and remediation utilities to identify and merge existing duplicate VMware CIs while preserving important relationship and historical data.

Pro Tips

  • Implement discovery behavioral parameters to exclude test or template VMs from CMDB population by configuring discovery patterns with specific naming conventions or folder exclusions, preventing CMDB pollution while maintaining comprehensive discovery of production infrastructure. Use custom CI attributes to store VMware-specific metadata like vMotion compatibility and distributed resource scheduler settings for enhanced change management workflows.
  • Configure Event Management correlation rules to suppress duplicate alarms from VMware infrastructure and implement intelligent escalation based on alarm duration and severity patterns rather than just initial severity levels. Create custom event processing scripts that enrich VMware events with CMDB data to automatically populate affected CI relationships and service impact information.
  • Leverage ServiceNow's Discovery Reconciliation framework to create custom reconciliation rules for VMware environments that account for vMotion operations and dynamic VM placement changes. Implement scheduled reconciliation jobs that verify CI relationships after significant VMware configuration changes like cluster maintenance or datacenter migrations.
  • Use Integration Hub's subflow capabilities to create reusable VMware automation patterns that combine discovery data with vRealize Operations performance metrics for comprehensive infrastructure health monitoring. Implement error handling and retry logic in custom spokes to handle temporary vCenter API unavailability during maintenance windows.
  • Optimize discovery schedules by implementing conditional discovery triggers based on VMware vCenter events rather than purely time-based schedules, reducing unnecessary discovery load while ensuring timely CI updates. Create custom dashboard widgets that correlate VMware infrastructure health metrics with ServiceNow incident and change patterns for proactive infrastructure management.
  • Implement custom MID Server capability extensions for specialized VMware discovery requirements like NSX network discovery or vSAN storage mapping that extends beyond standard discovery patterns. Use ServiceNow's Business Rule framework to automatically trigger workflows when VMware CI attributes change, enabling automated compliance checking and change approval processes.

Known Limitations

  • VMware vCenter Server API rate limiting restricts concurrent discovery sessions to approximately 100-200 simultaneous connections, requiring careful scheduling in large environments with multiple MID Servers to prevent API throttling and discovery failures. Discovery performance degrades significantly in environments with more than 10,000 VMs per vCenter Server without proper schedule optimization.
  • Event Management connector for VMware requires manual configuration of vCenter alarm forwarding and does not automatically discover or configure alarm definitions, meaning that new alarm types must be manually mapped to ServiceNow event processing rules. Real-time event processing is limited by vCenter's alarm notification capabilities and network connectivity between vCenter and ServiceNow.
  • The vRealize Operations spoke requires Integration Hub Professional licensing and additional vRealize Operations licensing for API access, which may significantly increase total cost of ownership for comprehensive VMware monitoring integration. Historical performance data retention is limited by vRealize Operations configuration and may not align with ServiceNow's data retention policies.
  • Discovery patterns do not automatically capture VMware NSX network virtualization components or detailed vSAN storage configurations, requiring custom development or third-party solutions for comprehensive software-defined datacenter discovery. Advanced VMware features like Kubernetes integration and container discovery require separate specialized discovery patterns or manual CI management.
  • MID Server deployment requirements mean that organizations must maintain additional infrastructure components with network connectivity to VMware management interfaces, potentially creating security and compliance considerations for environments with strict network segmentation requirements. MID Server high availability configurations require additional planning and infrastructure investment for critical discovery operations.

Frequently Asked Questions

Can ServiceNow discover VMware NSX network components and how are they represented in the CMDB?

ServiceNow's standard VMware discovery patterns have limited support for NSX components and primarily focus on traditional vSphere infrastructure like VMs, hosts, and clusters. NSX logical switches, distributed firewalls, and load balancers require custom discovery development or third-party discovery tools that can integrate with ServiceNow through REST APIs. Some organizations implement custom MID Server probes that connect to NSX Manager APIs to discover network virtualization components, but this requires significant development effort and ongoing maintenance as NSX APIs evolve.

How does ServiceNow handle VMware vMotion events and maintain accurate CI relationships when VMs move between hosts?

ServiceNow Discovery automatically updates VM-to-host relationships during scheduled discovery runs when VMs are moved via vMotion, typically within the next discovery cycle which may be daily or weekly depending on configuration. Real-time vMotion tracking requires implementing Event Management integration with vCenter to capture vMotion events and trigger immediate relationship updates through custom event processing rules. The discovery reconciliation framework helps maintain relationship accuracy by validating and correcting CI relationships based on current vCenter inventory data, though there may be a delay between the actual vMotion event and CMDB updates depending on discovery frequency.

What are the minimum VMware permissions required for ServiceNow discovery and can they be restricted for security compliance?

ServiceNow VMware discovery requires a minimum of 'Read-only' role assignment at the vCenter Server level with additional specific permissions for inventory access, performance statistics, and alarm management if using Event Management integration. For enhanced security compliance, organizations can create custom vCenter roles with granular permissions limited to specific datacenter objects or resource pools while maintaining discovery functionality. The service account must have permissions to access virtual machine inventory, host system information, cluster configuration, and datastore details, but can be restricted from sensitive areas like vCenter Server administration, user management, and advanced configuration options that are not required for discovery operations.

How can I integrate ServiceNow with VMware Cloud on AWS or other VMware cloud services?

VMware Cloud on AWS and other VMware cloud services can be integrated using the same discovery patterns and Event Management connectors as on-premises vSphere deployments, provided that network connectivity exists between ServiceNow MID Servers and the cloud-hosted vCenter Server instances. Cloud deployments may require additional configuration for network access through VPN connections or direct cloud connectivity, and authentication may involve cloud-specific identity providers or federated authentication systems. Some cloud providers offer specific ServiceNow integration capabilities through marketplace applications or pre-configured connection templates that simplify the integration process while maintaining security and compliance requirements for cloud environments.

Can ServiceNow automatically provision VMware VMs through integration workflows and what are the requirements?

ServiceNow can provision VMware VMs through Integration Hub flows that connect to vCenter Server REST APIs or through integration with VMware vRealize Automation if available in the environment. VM provisioning requires elevated permissions beyond discovery, including resource pool management, datastore access, and virtual machine creation rights in vCenter Server. The integration typically involves Service Catalog requests that trigger Integration Hub flows with VM specification parameters, template selection, and network configuration, though organizations must implement proper approval workflows and resource governance to prevent unauthorized VM sprawl. Advanced provisioning scenarios may require integration with VMware vRealize Suite products for enterprise-grade automation capabilities with proper governance and policy enforcement.

How do I troubleshoot performance issues with VMware discovery in large environments and optimize discovery schedules?

Performance optimization in large VMware environments requires implementing multiple targeted discovery schedules segmented by cluster, datacenter, or functional area rather than attempting to discover entire environments in single operations. MID Server resource allocation should be monitored and scaled appropriately, with consideration for deploying multiple MID Servers with load balancing for environments exceeding 5,000 VMs per discovery schedule. Discovery behavioral parameters should be tuned to limit concurrent operations, implement incremental discovery patterns, and schedule discovery runs during off-peak hours to minimize impact on vCenter Server performance. Monitoring vCenter Server API response times and implementing discovery throttling helps prevent API overload while maintaining comprehensive infrastructure discovery coverage.

What happens to ServiceNow CI data when VMware infrastructure is decommissioned and how should cleanup be managed?

ServiceNow Discovery automatically marks CIs as 'Retired' when VMware infrastructure components are no longer detected during discovery runs, but manual cleanup processes may be required for immediate decommissioning scenarios to prevent stale CMDB data. Organizations should implement CI lifecycle management processes that coordinate VMware decommissioning activities with ServiceNow CMDB updates through change management workflows or automated scripts that update CI status based on infrastructure changes. Data retention policies should be configured to archive rather than delete retired VMware CIs to maintain historical relationships and audit trails for compliance requirements. Best practices include implementing approval workflows for CI retirement and maintaining relationship history for post-decommissioning analysis and reporting purposes.

Test Your Knowledge

Quick 3-question quiz — see how your ServiceNow skills stack up.

Question 1 of 3Performance

A list view on a table with millions of records is slow. Best fix?

Select an answer to continue