ServiceNow CMDB

You can integrate Censys Attack Surface Management (ASM) with ServiceNow Configuration Management Database (CMDB) to automatically sync your Censys asset inventory with ServiceNow.

This integration enables you to:

  • Automatically sync your Censys asset inventory, including hosts, web entities, storage buckets, certificates, and domains to CMDB CI tables.
  • Automatically sync Censys asset attributes like tags, labels, and location to CMDB CI tables.
  • Filter ingestion to CMDB by Censys tag and source fields.
  • Customize your integration sync frequency.

Prerequisites

  • An active subscription to an Enterprise License of Censys Attack Surface Management.
  • A ServiceNow license that includes ServiceNow CMDB.
  • Your ASM API key.
    • Your API key is available at the top of the Integrations page in the ASM web console.

  • Your ASM workspace ID.
    • To retrieve your workspace ID, log in to the ASM web console, then click the gear icon next to your workspace at the top of the page.

      • Your workspace ID will be provided in the URL after https://app.censys.io/workspace/edit/

Obtain the Censys app from the ServiceNow store

  1. Log in to the ServiceNow store and go to the page for the Censys ASM to CMDB integration.
  2. Click Get.
    1. Your request will be vetted and approved by the Censys team. When you are approved, you will receive an email.

Install and configure the app in ServiceNow

  1. Log in to the ServiceNow dashboard as an admin. Go to the Application Manager.

  2. Find and select the Censys ASM for CMDB app.

  3. Click Install.

  4. Refresh the ServiceNow dashboard.

  5. In the ServiceNow All search bar, search for Censys ASM CMDB Integration to confirm the app was installed.

  6. In the All search bar, go to IntegrationHub > Connections & Credentials > Connection & Credential Aliases.

  7. Select Censys ASM CMDB Integration Connection.

  8. Under Connections, select Censys ASM API Connection.

  9. Under Attributes in the Workspace ID field, enter your workspace ID.

  10. Next to the Credential field, click the magnifying glass icon.

  11. In the pop-up, click the New button.

  12. Select Custom Header API Key Credential.

    1. In the Name field, enter a recognizable label for your API key.
    2. In the Header Name field, enter Censys-Api-Key
    3. In the API Key field, enter your Censys API key.
    4. Keep Authorization Algorithm set to its default configuration.
  13. Back on the Connection menu, select your new Censys ASM API Key credential.

  14. In the top menu bar, click the globe icon. Click Application Scope, then select Censys ASM CMDB Integration.

  15. In the All search bar, go to Censys ASM CMDB Integration > Admin > Scheduled Import.

  16. Select Censys ASM CMDB Integration - Daily.

    1. On this page, you can modify when ASM sends data to CMDB. If you do not want to modify the schedule, leave the settings to their default values.
  17. Check the Active box.

  18. In the top left corner of the page, open the Additional actions menu and click Save. Alternatively, in the top right corner of the page, click Execute Now.

View assets imported from ASM

Data from your Censys ASM workspace will be present in CMDB after you execute a data import or after the first data import runs. You can see data from Censys ASM in Censys ASM CMDB Integration > Configuration Item > All.

View and modify data mapping

By default, ASM assets are mapped to CMDB items as shown in the table below.

ASM assetCMDB item
HostIP Address
CertificateUnique Certificate
DomainDNS Domain Info
Web EntityBusiness Service
Storage BucketStorage Pool

You may modify which items in CMDB that ASM data maps to using the following process. Note that this process is optional and you can use the default settings if you prefer.

  1. While within the Censys ASM CMDB Integration application scope, go to Configuration > IntegrationHub ETL.
  2. Select CMDB Application: Censys ASM CMDB Integration > Censys ASM Integration with ServiceNow CMDB.
  3. Select Map Data to CMDB and Add Relationships > Select CMDB Classes to Map Source Data.
  4. Make your desired changes.