Itom Visibility

When working in the Agent Client Collector (ACC) admin workspace, you can select actions to perform on the agent by selecting the Agent actions button.

When selecting an agent in the ACC admin workspace, select from the displayed options to view information relating to the agent.

Configure and deploy new agents in your environment, using the Agent Onboarding guide. The Agent Onboarding guide generates a customized installation plan for deploying the Agent Client Collector on your endpoints or servers.

Discovery identifies and classifies information about ACE load balancers.

Configure certificate authorities (CAs) that your organization trusts and activate the certificate authority trust policy so that certificates from other authorities are flagged as untrusted. Configure certificate authorities (CAs) that your organization trusts and activate the certificate authority trust policy so that certificates from other authorities are flagged as untrusted.

With AI Agent Topology Mapping, you can use patterns to identify AI infrastructure components across cloud platforms in your organization. Discover your AI agents, models, and prompts, and get centralized CMDB visibility to track security compliance and vulnerabilities across your AI deployments.

Reference topics provide pattern information for AI Agent Topology Mapping, including prerequisites, tables, fields, and relationships.

Analyze an individual cryptographic asset with AI insights powered by ServiceNow Otto and a dependency graph, which shows where the asset is used.

Discovery identifies and classifies information about Alteon load balancers.

AI Agent Topology Mapping discovers Amazon Bedrock AI services, agents, and models during horizontal discovery.

A process and its corresponding resource information can be used to determine whether the process is a clustered process.

Discovery identifies the following computers, clusters, and virtual machines.

The database catalog lists all the catalog objects, or databases, discovered for an instance of a database.

Discovery can detect JBoss application servers running on Linux and Windows systems.

Discovery creates or updates a CMDB record when it detects an instance of an Oracle or BEA Weblogic application server running on a Windows or Linux system.

The IBM WebSphere application server is a software framework with middleware that hosts Java-based web applications. Discovery creates or updates a CMDB record when it detects an instance of a WebSphere application server running on a Windows or Linux system.

The table structure for managing software installations behaves differently when the Software Asset Management (SAM) application is activated.

To perform the mapping that establishes application relationships, Discovery must be able to detect TCP connections.

Discovery can explore the VMware vCenter process running on a Windows or Linux host. IPv6 is supported for discovery in VMware vCenter.

The Dell Remote Assistant Card (DRAC) and Integrated Remote Assistance Card (iDRAC) provide users with tools and functionality to monitor, troubleshoot, and repair servers. You can generate DNS URLs to access out-of-band devices when security prevents access from IP addresses.

Discovery can detect the physical connections, known as layer 2, between network devices.

Discovery and Service Mapping find Citrix NetScaler load balancers including Server Load Balancing (GSLB).

Discovery of Cisco CSS load balancers is performed by SNMP.

Discovery and Service Mapping can find F5 BIG-IP load balancers via SNMP, SSH, and through the REST API.

Discovery of Cisco GSS load balancers is performed by both SNMP and SSH.

Discovery of HAProxy Community edition load balancers is performed by SSH.

Discovery of NGINX load balancers is performed by SSH.

Discovery can collect data about network routers, switches, and applications.

Discovery can identify an instance of MySQL that is running on UNIX or Windows operating systems.

Discovery identifies several network devices, including load balancers, routers, TCP connections, IP networks, and so on. It can find devices through traditional port probes, and then through identifications and exploration probes, or through patterns. It also supports discovery by identifying HTTP and TCP connections.

NGINX is an open source web server with a load balancer. Discovery identifies the web server and information related to the load balancer.

Discovery can identify an Oracle database instance that is running on UNIX or Windows operating systems. It can also find Oracle clusterware, which runs Real Application Clusters (RAC).

Discovery identifies Puppet Masters running on UNIX servers.

Discovery identifies several types of software.

Discovery collects information on Direct Attached Storage (DAS), Storage Area Networks (SAN), and Network Attached Storage (NAS).

Discovery gathers information about virtual machines managed by VMware vCenter.

Discovery uses the Docker Pattern to collect data about specific objects in a Docker engine, running on a Linux host.

Discovery can collect image and container information from Operating system-level virtualization (OS-level virtualization) engines.

ServiceNow Cryptographic Asset Compliance helps you inventory, assess, and manage cryptographic assets across cloud and on-premises environments to support post-quantum cryptography (PQC) readiness and help maintain security compliance.

Reference information for Cryptographic Asset Compliance includes risk indicator definitions, policy descriptions, and field descriptions.

Discovery can find Citrix License Server instances and Delivery Controller components that run on Windows machines.

Discovery collects information about cloud resources in AWS datacenters. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

ITOM Visibility discovers resources on cloud platforms.

Configure computer configuration item (CI) forms to display data from the Software Installations [cmdb_sam_sw_install] table.

Discovery can find information about UNIX, Linux, and Windows hosts with attached storage.

Control which serial number type populates the Serial Number field on discovered Linux server CIs by configuring the sn_itom_pattern.linux_server_preferred_serial_number_type system property.

Install AI Agent Topology Mapping from the ServiceNow Store and configure discovery schedules to identify AI infrastructure components.

Set up cryptographic asset discovery and configure trusted certificate authorities (CAs) to prepare for your organization's cryptographic asset monitoring needs.

Create a serverless discovery schedule to discover F5 BIG-IP load balancers through REST OAuth 2.0 authentication (tokens).

The fields displayed in the Cryptographic summary of an asset vary by asset type.

ITOM Visibility discovers IBM WebSphere DataPower. The Discovery feature uses the DataPower Server pattern for horizontal discovery. The Service Mapping feature uses the DataPower pattern for top-down discovery.

Discovery collects information about cloud resources in Microsoft Azure datacenters. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

ITOM Visibility collects unique data for each type of device and stores it in dedicated tables, fields, and relationships.

Discovery collects information about cloud resources in Google Cloud Platform (GCP). Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery collects information about cloud resources in the IBM Cloud Platform and creates relationships between the CIs it finds. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery collects information about VMware resources in your cloud service accounts.

Discovery can find database applications, such as MySQL, Oracle, and MongoDB. Discovery can also find database management system software, such as MSSQL Server.

Discovery and Service Mapping uses the Patterns extension sections to provide a Database Administrator report (DBA report) for the Apache Cassandra, Microsoft SQL, MySQL, MongoDB, and Oracle databases. The extension sections for each DB pattern populate the related entries tables. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Disable the default SNMP-based NetApp storage cluster discovery and use REST-based discovery instead for enhanced security.

ServiceNow ITOM Content Service offers extensive visibility of products in your infrastructure. The classification of processes identified by Predictive Intelligence enables wider discovery and weekly updates of new configuration items in the CMDB. Use the Discovery Admin Workspace to review and manage ITOM Content Service suggestions.

Both horizontal and top-down discovery use these run options.

If you prefer not to start using the default HAProxy pattern-based discovery, enable probe-based HAProxy discovery to continue using it instead.

Collect only the current operating system patch level by configuring the sn_itom_pattern.discover_latest_os_patches MID Server property. Collecting only the current patch is supported only for AIX Server discovery.

You can make multiple PostgreSQL instances on the same host distinguishable by port number by creating the mid.discovery.postgresql.include_port_in_name MID Server property. This property is supported for UNIX hosts only.

AI features in ITOM Visibility help administrators automate service maps, diagnose discovery issues, manage certificates, and resolve incidents using generative AI and agentic workflows.

Learn how AI Agent Topology Mapping discovers AI infrastructure components across cloud platforms using patterns.

Cryptographic Asset Compliance provides centralized visibility and control of cryptographic assets for proactive risk assessment and post-quantum cryptography (PQC) readiness.

The Cryptographic Asset Compliance Home page provides centralized visibility into cryptographic asset health, risk indicators, key metrics, and actionable insights for proactive compliance management.

Discovery can find devices that use the HTTP protocol.

Review the ITOM Content Service suggestions for application discovery and activate the discovery classifiers to enable the creation of configuration items.

Use ITOM Content Service and ITSM Software Asset Management to discover version-less installed software that isn't discovered automatically with Software Asset Management Core or Software Asset Management Professional or file-based Discovery.

You can install the AI Agent Topology Mapping application (sn_itom_agnt_ptrn) if you have the admin role.

Install the ITOM Content Service application (sn_smart_content) to manage and monitor the creation of configuration items based on application fingerprints.

Install all required ITOM Visibility applications and plugins from the IT Operations Management Product Hub.

Using ITOM Content Service enables you to have the CMDB populated with new data every week. Use the knowledge base articles to learn about the Configuration Item candidates that were released.

This ITOM Content Service use case demonstrates how organizations can achieve enhanced visibility into their environment.

The dashboard provides real-time monitoring, proactive alerts, automation of common tasks, and centralized diagnostics to reduce downtime and support tickets.

The ITOM Infrastructure Services Workspace provides real-time monitoring, proactive alerts, automation of common tasks, and centralized diagnostics to reduce downtime and support tickets.

The dashboard integrates several tables so that issues can be monitored and resolved. The workspace provides real-time monitoring, proactive alerts, automation of common tasks, and centralized diagnostics to reduce downtime and support tickets.

See a concise overview of MID Server activity. The workspace provides real-time monitoring and enables corrective actions across multiple MID Servers.

The dashboard integrates different applications to provide real-time monitoring, proactive alerts, automation of common tasks, and centralized diagnostics to reduce downtime and support tickets.

The ServiceNow ITOM Visibility product consists of ServiceNow DiscoveryServiceNow Discovery is an automated process that continuously scans and identifies all the components within the IT infrastructure. It plays a crucial role in maintaining an accurate and up-to-date CMDB 360 with the information it finds., Firewall Audits and ReportingUse the Firewall Audits and Reporting application to explore and create an inventory of your firewall security policies, devices, device groups, and manager information. Additionally, you can initiate requests for new firewall rules through the Service Catalog application and conduct audits of firewall security policies within specified time frames., Certificate Inventory and ManagementWith Certificate Inventory and Management, you can discover, conduct an inventory, and proactively manage all TLS certificates. Certificate Inventory and Management supports IPv6, providing comprehensive coverage for your certificate management needs., Service MappingThe ServiceNow Service Mapping application discovers all application services in your organization and builds a comprehensive map of all devices, applications, and configuration profiles used in these application services., Cryptographic Asset ComplianceServiceNow Cryptographic Asset Compliance helps you inventory, assess, and manage cryptographic assets across cloud and on-premises environments to support post-quantum cryptography (PQC) readiness and help maintain security compliance., AI Agent Topology MappingWith AI Agent Topology Mapping, you can use patterns to identify AI infrastructure components across cloud platforms in your organization. Discover your AI agents, models, and prompts, and get centralized CMDB visibility to track security compliance and vulnerabilities across your AI deployments., ITOM Content ServiceServiceNow ITOM Content Service offers extensive visibility of products in your infrastructure. The classification of processes identified by Predictive Intelligence enables wider discovery and weekly updates of new configuration items in the CMDB. Use the Discovery Admin Workspace to review and manage ITOM Content Service suggestions., Tag GovernanceEffective tag management improves reporting and overall operations management efficiency. Use the ServiceNow Tag Governance app to identify and remediate on-premises or cloud resources that are inconsistent and don't comply with the tag policies of your organization., Cloud Discovery Workspace Cloud Discovery Workspace offers a comprehensive solution to manage the cloud operations of your organization., and Cloud License EstimatorCloud License Estimator estimates the resource count for all cloud resources eligible for licensing. applications. Discovery and Service Mapping give you a unified, connected view of your entire IT network and the services that it supports. The Service Graph Connectors and CMDB 360 applications provide data to ITOM Visibility.

The ITOM Visibility use cases are described in this section.

ITOM Visibility consists of two ServiceNow products: Discovery and Service Mapping. These products are responsible for creating Configuration Items (CIs) in the CMDB and relating them. The goal of this product view is to help you to understand how ITOM Visibility works with the core CSDM framework.

Consider these points while implementing the CSDM framework.

ITOM Visibility manages and uses CMDB tables. Several ServiceNow products benefit from and add value to ITOM Visibility.

View details of cryptographic assets and filter the data to focus on specific assets, analyze risk indicators, and export details from the Inventory page.

Large payloads for Linux and Solaris direct attached storage can cause out of memory errors if not configured to serialize the processing of the payload.

AI Agent Topology Mapping discovers Microsoft Foundry (classic) services, assistants, and models during horizontal discovery.

AI Agent Topology Mapping discovers Microsoft Foundry Hub assistants and models during horizontal discovery.

AI Agent Topology Mapping discovers Microsoft Foundry (new) services, agents, and models during horizontal discovery.

Monitor your cryptographic posture, investigate risk, and view and manage the assets that Cryptographic Asset Compliance inventories.

The Discovery and Service Mapping application uses the SSIS pattern to find SQL Server Integration Services (SSIS) on your infrastructure. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

The Discovery and Service Mapping Patterns application uses the MSSql DB On Windows pattern to find Microsoft SQL DB servers and clusters on your infrastructure. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery and Service Mapping find NetApp servers and clusters using patterns. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Limit Linux discovery to specific network adapters and their primary IP addresses to improve performance by ignoring secondary IP addresses.

Plugins and applications are installed with ITOM Visibility, and application dependencies are installed when you update.

Cryptographic Asset Compliance uses Policy as Code Engine (PaCE) policies to evaluate your cryptographic assets and flag risk.

Cryptographic Asset Compliance uses policies to evaluate cryptographic assets and flag risk. The policies are available on the Settings page.

Post-quantum cryptography (PQC) represents new encryption algorithms that can strongly resist quantum computer attacks, addressing the urgent need for quantum-resistant security.

Discovery and Service Mapping uses patterns to collect information about A10 load balancers.

Discovery identifies and classifies information about AIX servers.

Discovery identifies and classifies information about Apache web servers on both Windows and Linux computers.

General software packages are collections of programs that work together, often with similar user interfaces. Examples include Microsoft Office 365 (Word, Excel, PowerPoint), and Apple's iWork (Pages, Numbers, Keynote). Discovery identifies and classifies information about general software packages. Data it collects include, Name, Version, Install Count, License Count, Installation Date, Software, and more.

Discovery identifies and classifies information about HP-UX computers.

Discovery identifies and classifies information about IP addresses.

Discovery identifies and classifies information about IP networks.

Discovery and Service Mapping applications use probes and patterns to discover and map information about Linux computers and servers. The information is populated in the CMDB. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery identifies and classifies information about Mac (OS/X) computers.

Discovery identifies and classifies information about Microsoft IIS servers.

Discovery identifies and classifies information about Netware.

Discovery identifies and classifies information about network printers.

Discovery identifies and classifies information about network switches and routers.

Discovery identifies and classifies information about services and daemons.

Discovery identifies and classifies information about Solaris computers.

Discovery identifies and classifies information about storage devices.

Discovery gathers information about storage units that connect to Linux, Solaris, and Windows hosts via a local I/O port or Host Bus Adapter (HBA).

Discovery can explore storage devices that contain a Storage Management Initiative Specification (SMI-S) provider that is a specialized Common Information Model (CIM) server.

Discovery identifies and classifies information about TCP connections using the ADM and ADME probes.

Discovery identifies and classifies information about Tomcat server Web applications running on UNIX machines.

Discovery identifies and classifies information about an uninterruptible power supply (UPS).

Discovery collects disk and volume information for Veritas Volume Manager (VxVM) on Linux hosts and maps file systems mounted on Veritas volumes to the upstream storage provider.

Discovery identifies and classifies information about Windows computers that use IPv4 addresses, IPv6 addresses, or both.

Discovery creates or updates a CMDB record when it detects a running instance of HBase on a UNIX server.

Discovery creates or updates a CMDB record when it detects a running instance of MongoDB.

Discovery can find running instances of PostgreSQL on Windows and Linux systems.

The ServiceNow Discovery application finds Microsoft Hyper-V hypervisors in your environment.

This is the processing flow for classifying Common Information Model (CIM) storage systems.

Discovery and Service Mapping Patterns application uses the WMB patterns to discover Integration Bus (formerly WebSphere Message Broker and IBM Integration Bus) and HTTP listeners running on both Linux and Windows. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery identifies a Linux JBoss application server using probes and sensors.

Discovery stores load balancer information in several tables.

Discovery creates or updates a CMDB record when it detects a running instance of Sun Java Enterprise System (JES).

Discovery and Service Mapping can discover a wide range of operating systems and applications.

If you are not using the Weblogic pattern, Discovery follows this process when it uses the Windows - Active Processes or Linux - Active Processes probes.

Discovery establishes the relationships between a Windows server cluster and its nodes.

The Discovery and Service Mapping Patterns application uses the Active Directory Domain Controller On Windows pattern to find Active Directory domain controllers running on a Windows server. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery creates or updates a CMDB record when it detects a running instance of Adobe JRun.

Discovery and Service Mapping Patterns application uses the to find Cisco UCS equipment, including chassis and blades. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery creates or updates a CMDB record when it detects a running instance of Microsoft Exchange Client Access Server (Microsoft Exchange CAS).

Discovery creates or updates a CMDB record when it detects a running instance of Exchange Hub.

Discovery creates or updates a CMDB record when it detects a running instance of Exchange Mailbox.

Discovery creates or updates a CMDB record when it detects a running instance of GlassFish Server.

Discovery creates or updates a CMDB record when it detects a running instance of HP Operations Manager.

Discovery creates or updates a CMDB record when it detects a running instance of HP Service Manager.

The ServiceNow Discovery application uses the WMQ On Unix and WMQ On Windows patterns to find IBM MQ (formerly IBM WebSphere MQ) resources. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery creates or updates a CMDB record when it detects a running instance of Microsoft SharePoint.

The ServiceNow Discovery application uses the Tuxedo pattern to find Oracle Tuxedo resources. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

The Discovery and Service Mapping application uses the SSAS pattern to find SQL Server Analysis Services (SSAS) on your infrastructure. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store..

Discovery and Service Mapping uses the Sybase pattern to find SAP Sybase Adaptive Server Enterprise (ASE) databases and catalogs in your infrastructure. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Discovery of Radware load balancers is performed by SNMP.

Discovery can find Linux Red Hat clusters that offer high availability and load balancing.

Risk indicators are used to identify security vulnerabilities and compliance issues in cryptographic assets.

Risk indicators highlight cryptographic assets that need attention so you can prioritize remediation and track compliance.

Run automated self-tests on an Agent Client Collector (ACC) agent from the ITOM Infra Services Workspace to identify and address agent issues. View agent errors and invoke the relevant remediation steps.

Discovery can classify devices using the HTTP(S) protocol. You can create your own HTTP classifier to find devices and access them with Basic Auth credentials, rather than using SNMP or SSH credentials.

ITOM Visibility can discover SAP applications, SAP HANA Database, and SAP HANA DB Catalog. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Control which IP version Discovery populates on a Network Adapter CI during Linux, Windows, and Solaris discovery.

Configuring the discovery of cryptographic assets involves setting up certificate and cloud discovery.

Control data sharing by opting in or out of ITOM Content Service sharing options using the Discovery Admin Workspace.

Discovery collects information about storage area networks from specialized devices, such as storage arrays and Fibre Channel (FC) switches. Discovery creates specific references between the tables in the SAN schema.

Discovery creates configuration items (CIs) and CI relationships for physical and logical storage components. Storage can be attached directly to servers or through fibre channel switched fabric.

To use the Puppet probe with sudo, you must add the must_sudo parameter to each probe that requires it.

If you are not using the Weblogic pattern, you can add sudo privileges to the Linux, the Weblogic - Find config.xml probe.

Use this procedure for configuring a standalone storage device with the required SMI-S Provider for Discovery.

Discovery can find information about a UNIX or Linux host and attached storage.

Discovery can find information about a Windows host and attached storage.

In some environments you may not want to collect the port data for SNMP network devices.

Use the ls of command to return active TCP connections and can be installed on Solaris and AIX target machines.

Use the Agent Client Collector (ACC) admin workspace to monitor the status of your agents.

View detailed information about an individual cryptographic asset, including its risk indicators, cryptographic properties, AI-generated insights, and dependencies.

Reference topics provide additional information about mapping and fine-tuning application services using ITOM Visibility lists and forms.

Discovery and Service Mapping Patterns finds computers running the z/OS operating system using the IBM zOS Server pattern. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.