{"product_id":"servicenow-sla-breach-risk-in-n8n-slack-escalation","title":"ServiceNow SLA Breach Risk in n8n + Slack Escalation","description":"\u003ch3\u003eAutomatically estimate ServiceNow SLA breach risk every 15 minutes—and escalate the risky incidents to Slack\u003c\/h3\u003e\n\u003cp\u003eThis \u003cstrong\u003en8n workflow\u003c\/strong\u003e polls \u003cstrong\u003eServiceNow\u003c\/strong\u003e to estimate the likelihood of \u003cstrong\u003eSLA breach\u003c\/strong\u003e for open incidents using recent resolution history, then \u003cstrong\u003eupdates urgency in ServiceNow\u003c\/strong\u003e and posts an alert to \u003cstrong\u003eSlack\u003c\/strong\u003e when risk is high (probability \u0026gt; 70%).\u003c\/p\u003e\n\n\u003ch3\u003eWhat this workflow does\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eRuns on a schedule\u003c\/strong\u003e every \u003cstrong\u003e15 minutes\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eFetches active, unresolved incidents\u003c\/strong\u003e from ServiceNow and extracts key fields such as \u003cstrong\u003esys_id\u003c\/strong\u003e, \u003cstrong\u003enumber\u003c\/strong\u003e, \u003cstrong\u003ecategory\u003c\/strong\u003e, \u003cstrong\u003epriority\u003c\/strong\u003e, and \u003cstrong\u003eopened_at\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eBuilds historical resolution benchmarks\u003c\/strong\u003e by grouping incidents by \u003cstrong\u003ecategory\u003c\/strong\u003e and \u003cstrong\u003epriority\u003c\/strong\u003e, then retrieving the \u003cstrong\u003e20 most recent resolved incidents\u003c\/strong\u003e for each group.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eCalculates breach risk\u003c\/strong\u003e for each open incident using: \u003cem\u003eelapsed time ÷ historical average resolution time\u003c\/em\u003e. If no history exists, it uses a \u003cstrong\u003edefault of 240 minutes\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eApplies a risk threshold\u003c\/strong\u003e: it checks whether breach probability is \u003cstrong\u003egreater than 70%\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eEscalates in ServiceNow\u003c\/strong\u003e by updating the incident’s \u003cstrong\u003eurgency\u003c\/strong\u003e and adding a \u003cstrong\u003ework note\u003c\/strong\u003e documenting the auto-escalation.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eNotifies your team in Slack\u003c\/strong\u003e by posting a breach-risk alert to a configured channel.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003eProactively surface high-risk ServiceNow incidents before SLA breach occurs.\u003c\/li\u003e\n  \u003cli\u003eReduce manual monitoring by using recent resolution history to estimate breach probability.\u003c\/li\u003e\n  \u003cli\u003eTrigger consistent escalation updates (urgency + work notes) and real-time Slack alerts for on-call teams.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eTechnical details\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eIntegrations\u003c\/strong\u003e: ServiceNow (Basic Auth) and Slack (channel alerts).\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eCore workflow logic\u003c\/strong\u003e: \u003ccode\u003eif\u003c\/code\u003e, \u003ccode\u003eset\u003c\/code\u003e, \u003ccode\u003ecode\u003c\/code\u003e, \u003ccode\u003eno op\u003c\/code\u003e, \u003ccode\u003ewait\u003c\/code\u003e, \u003ccode\u003elimit\u003c\/code\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eConfigurable settings\u003c\/strong\u003e: breach-risk threshold (default \u003cstrong\u003e70%\u003c\/strong\u003e), default SLA minutes (default \u003cstrong\u003e240\u003c\/strong\u003e), and ServiceNow query filters (active\/state\/category\/priority) to match your SLA rules.\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"N8N Commerce","offers":[{"title":"Default Title","offer_id":45923088498867,"sku":"N8N-18860","price":70.99,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0749\/6279\/6723\/files\/TLxQFMK3QxJaIC6wRNVCb_ozna4yEK.png?v=1788168194","url":"https:\/\/buyflowscripts.com\/products\/servicenow-sla-breach-risk-in-n8n-slack-escalation","provider":"N8N Commerce","version":"1.0","type":"link"}