Link nodes in the Relationship Graph

task australia Updated Sep 10, 2026 1 min read tisc-link-nodes.md

Raw file servicenow.com

Use Relationship Graph to link the nodes. Use filters to select specific nodes to investigate.

Before you begin

Role required: sn_sec_tisc.analyst

Procedure

Navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library > Observables > All Observables.
Open a record.
Select the Relationship Graphs tab.
Select the node.
Select Link.

Note: This action is only available at a home node level.

[Omitted image "tisc-link-node-actions.png"] Alt text: TISC link nodes
Select the Entity type from the list, for example, Observable.
Select the required entities from the list, and select Add.

The entity is added to the node and the relationship graph displays the linking.
To add another Entity type, repeat steps 4-7.
Use the filter to select specific nodes from the list.
To modify a link name, select the link and select More actions > Edit.
To unlink the related records from the nodes, select Unlink.
Select Show details to see the associated observables data.

Parent Topic:View details in Visualizer

Keywords Link nodesRelationship graph

59 lines · 2.1 KB Wrap lines

---
title: Link nodes in the Relationship Graph
description: Use Relationship Graph to link the nodes. Use filters to select specific nodes to investigate.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/tisc-link-nodes.html
release: australia
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [Link nodes, Relationship graph]
breadcrumb: [View details in Visualizer, Observables, TISC Library Repository, Threat Intel Library, Use, Threat Intelligence Security Center, Security Operations]
---

# Link nodes in the Relationship Graph

Use Relationship Graph to link the nodes. Use filters to select specific nodes to investigate.

## Before you begin

Role required: sn\_sec\_tisc.analyst

## Procedure

1. Navigate to **Workspaces** &gt; **Threat Intelligence Security Center** &gt; **Threat Intel Library** &gt; **Observables** &gt; **All Observables**.

2. Open a record.

3. Select the **Relationship Graphs** tab.

4. Select the node.

5. Select **Link**.

**Note:** This action is only available at a home node level.

\[Omitted image "tisc-link-node-actions.png"\] Alt text: TISC link nodes

6. Select the **Entity type** from the list, for example, `Observable`.

7. Select the required entities from the list, and select **Add**.

The entity is added to the node and the relationship graph displays the linking.

8. To add another Entity type, repeat steps 4-7.

9. Use the filter to select specific nodes from the list.

10. To modify a link name, select the link and select **More actions** &gt; **Edit**.

11. To unlink the related records from the nodes, select **Unlink**.

12. Select **Show details** to see the associated observables data.

**Parent Topic:**[View details in Visualizer](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/objects-visualizer.md)