Legacy: Create Security Operations workflow triggers

---
title: Legacy: Create Security Operations workflow triggers
description: Create a workflow trigger that contains a condition on a table.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/create-workflow-triggers.html
release: australia
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Legacy: Security Operations workflow triggers, Security Operations common functionality, Security Operations]
---

# Legacy: Create Security Operations workflow triggers

Create a workflow trigger that contains a condition on a table.

## Before you begin

**Important:**

This feature is no longer deployed, enhanced, or supported. For details, see the [Deprecation Process \[KB0867184\]](https://support.servicenow.com/kb_view.do?sysparm_article=KB0867184) article in the Now Support knowledge base.

Security Operations contains several workflow triggers in the base system:

-   **Configuration item changes on an active Security Incident**

    Uses integration to enrich CI-related data as configuration items change.

-   **Rescan vulnerable group**

    Rescans a vulnerable group, using the [Scan vulnerability workflow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/scan-vulnerability-workflow.md), when you **Close/Ignore** the group.

-   **Rescan vulnerable item**

    Rescans a vulnerable item, using the [Scan vulnerability item workflow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/scan-vulnerable-item-workflow.md) when you **Close/Ignore** the item.


Roles required:

-   To read: sn\_sec\_cmn.read
-   To create or update: sn\_sec\_cmn.write
-   To delete: sn\_sec\_cmn.admin

## Procedure

1.  Navigate to **All** > **Security Operations** > **Utilities** > **Workflow Triggers**.

2.  Select **New**.

3.  Fill in the fields on the form, as appropriate.

<table id="table_vks_thr_ns"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Name

</td><td>

The name of the workflow trigger.

</td></tr><tr><td>

Description

</td><td>

Enter a description for the workflow trigger.

</td></tr><tr><td>

Table

</td><td>

The table containing the workflow trigger. If you selected the **Use filter group** check box and selected a filter group, this field defaults to the table associated with the selected filter group.

</td></tr><tr><td>

Condition

</td><td>

Use the [condition builder](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-user-interface/c_ConditionBuilder.md) to define the criteria for the workflow trigger. If you selected the **Use filter group** check box and selected a filter group, the **Condtion** fields are not displayed.

</td></tr><tr><td>

Active

</td><td>

Select this check box to activate the workflow trigger.

</td></tr><tr><td>

Use filter group

</td><td>

Select this check box to use a predefined filter group or [create a new filter group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/create-filter-group.md) to define the workflow trigger criteria.

</td></tr><tr><td>

Filter group

</td><td>

Select the filter group to use for defining workflow triggers. This field appears only if the **Use filter groups** check box is selected.

</td></tr></tbody>
</table>4.  When you have completed your entries, select and hold \(or right-click\) in the form header and select **Save**.

    \[Omitted image "WorkflowTriggerFilters.png"\] Alt text: WorkflowTriggers with filters example

    The **Workflows** tab appears. It contains workflows that are run when all filter conditions or filter group conditions are met.

5.  To add workflows, perform these steps.

    1.  In the **Workflows** tab, select **Edit**.

    2.  Use the condition builder, if needed, to locate the workflows you want to select, or use the slushbucket to select workflows and move them to the Workflows List.

    3.  Select **Save**.

    The selected workflows are added.

6.  Select **Update**.


**Parent Topic:**[Legacy: Security Operations workflow triggers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/workflow-triggers.md)