Share incidents from enterprise ServiceNow instance

Share incidents from your ServiceNow instance with a connected Incident Response instance. This creates a connected incident that can be delegated to a team in Incident Response.

Before you begin

Role required: Any role that enables editing of the incident record in the ServiceNow instance.


  1. Log in to the ServiceNow instance.
  2. Select the incident that you want to share with Incident Response.
    The Configuration item must contain a correlated service in Incident Response.
  3. From the form context menu, select Share with Lightstep Team App.
    Share with Lightstep.
  4. Select the Incident Response tenant with which you want to share the incident in the Application tenant field.
    Select application tenant.
  5. To assign a user to this incident in Incident Response, select a correlated user from the Assigned to list.
  6. Click Share.


A copy of the incident is created in Incident Response. You can see the enterprise incident record number in the incident. Changes between the two instances are synchronized. Incident in Lightstep.

What to do next

If you want to stop sharing with Incident Response:
  1. Select the incident that you want to stop sharing.
  2. From the form context menu, select Stop share with Lightstep Team App.
  3. Click Stop share.
The incident is still available in Incident Response. But the changes made will no longer be synchronized.

For more information about sharing incidents from your ServiceNow instance to Incident Response, see Share incident with Lightstep Incident Response.