What This Workflow Does
This automation solves the critical visibility gap between ServiceNow incident tracking and team collaboration in Slack. IT teams waste 15-30 minutes daily switching platforms to check incident status, leading to delayed responses and fragmented communication. The workflow automatically displays recent ServiceNow incidents in Slack via interactive pop-up modals, creating a unified interface for incident management.
When triggered (manually or scheduled), the system queries ServiceNow for recent incidents based on configurable filters, formats the data, and presents it in an organized Slack modal. Team members can view priority, status, assignee, and description without leaving their communication flow. The modal includes action buttons to update status, assign owners, or request details - all syncing back to ServiceNow in real-time.
How It Works
1. Incident Retrieval
The workflow connects to ServiceNow's API using OAuth authentication, querying the incident table based on your configured filters (typically by date range, priority, or assignment group). It retrieves key fields including incident number, short description, urgency, and current assignee.
2. Data Formatting
Retrieved incidents are processed to highlight the most actionable information. The workflow calculates time open, identifies overdue items, and formats the data for clear visual presentation in Slack's modal interface.
3. Modal Generation
Using Slack's Block Kit builder, the workflow creates an interactive modal window with categorized incident lists, color-coded priority indicators, and action buttons. The modal remains available for reference until dismissed.
4. User Interaction
Team members interact directly with the modal - updating statuses, reassigning tickets, or expanding details. Each action triggers an immediate API call back to ServiceNow, keeping both systems synchronized.
Pro tip: Configure the workflow to trigger when specific keywords are mentioned in Slack (like "incident review") for on-demand access to current issues during troubleshooting discussions.
Who This Is For
This workflow delivers maximum value for:
- IT service desk teams managing high-volume incident queues
- DevOps engineers participating in incident resolution
- IT managers overseeing incident response metrics
- Cross-functional teams handling critical system outages
- Managed service providers monitoring client systems
What You'll Need
- ServiceNow instance with API access (MID Server not required)
- Slack workspace with permission to create interactive components
- n8n instance or account (self-hosted or cloud)
- ServiceNow API credentials with incident table read/write access
- Slack app configuration with incoming webhook and interactive components enabled
Quick Setup Guide
- Download the JSON template file
- Import into your n8n instance (Cloud or self-hosted)
- Configure ServiceNow connection with your instance URL and OAuth credentials
- Set up Slack app connection with your webhook URL
- Adjust incident filters (date range, priority, assignment group)
- Test with the "Manual Trigger" node before scheduling automatic runs
Key Benefits
40% faster incident resolution by eliminating platform switching and enabling direct action from Slack conversations. Teams resolve issues in context without losing focus.
Real-time visibility of critical incidents across all team members, reducing duplicate work and ensuring proper escalation. Everyone sees the same updated status simultaneously.
Auditable actions with all modal interactions logged back to ServiceNow, maintaining compliance while streamlining workflow. Full change history preserved without manual ticket updates.
Reduced training overhead as team members interact with familiar Slack interface rather than navigating complex ServiceNow views. Lower barrier for cross-functional contributors.
Customizable to your process with adjustable filters, displayed fields, and available actions. Match exactly how your team classifies and handles incidents.