ServiceNow Key Terminology

ServiceNow uses specific terms that have precise meanings inside the platform. Knowing these terms lets you read documentation, follow training, and communicate with other ServiceNow professionals clearly. This topic explains the most important terms using plain language and visual comparisons.

Instance

An instance is a company's dedicated copy of ServiceNow. Every customer gets their own private instance. It runs in the cloud at a unique web address like acmecorp.service-now.com. No two companies share an instance — data is completely separate.

Acme Corp Instance: acmecorp.service-now.com     ← Company A's private copy
Globex Corp Instance: globexcorp.service-now.com ← Company B's private copy

Record

A record is a single entry in a database table. When a user submits a new IT support request, ServiceNow creates one record. That record stores all the details — who submitted it, when, the description, the status, and the assigned team.

Think of a record like one row in a spreadsheet. Each row is a separate record.

Ticket

The word ticket is informal language used across the industry. A ticket is simply a record that represents work to be done — an incident, a service request, or a change. Every ticket gets a unique number like INC0001234, REQ0004567, or CHG0000789.

Table

A table stores all records of a specific type. The Incident table stores all incidents. The User table stores all user accounts. ServiceNow has hundreds of built-in tables, and administrators create custom tables for specific needs.

Incident Table [incident]
───────────────────────────────────────────────
| number    | short_description | assigned_to |
|-----------|-------------------|-------------|
| INC000001 | Email not working | IT Support  |
| INC000002 | VPN disconnects   | Network Team|
───────────────────────────────────────────────

Field

A field is one column inside a table. In the Incident table, "Short Description," "Priority," "State," and "Assigned To" are all fields. Each field stores one piece of information for each record.

Form

A form is the screen where a user views or edits a single record. When a user clicks on an incident to see its details, the incident form opens. The form displays fields in a structured layout — like a paper form, but digital and interactive.

List

A list shows multiple records from a table at once, similar to a spreadsheet view. When an IT agent opens the Incident module, they see a list of all open incidents. They can filter, sort, and search within that list.

LIST VIEW (multiple records at a glance):
INC000001 | Email not working | High     | Open
INC000002 | VPN disconnects   | Critical | In Progress
INC000003 | Printer offline   | Low      | Open

FORM VIEW (one record in detail):
Number:      INC000001
Description: Email not working
Priority:    High
State:       Open
Assigned To: IT Support

Module

A module is a link in the left navigation menu that opens a list, form, or page. For example, the Incident module shows all incidents. The Users module shows all user accounts. Modules are the primary way users navigate the platform.

Application

An application (or "app") is a collection of related modules, tables, workflows, and scripts that handle a specific business area. ITSM is an application. The Service Catalog is an application. Administrators can build custom applications for unique business needs.

SLA (Service Level Agreement)

An SLA defines how quickly a team must respond to and resolve a ticket. For example, a Critical incident must be resolved within 4 hours. ServiceNow automatically tracks SLA timers and sends alerts before a deadline passes.

SLA Timer for Critical Incident:
─────────────────────────────────────────────
Incident created: 09:00 AM
SLA target: 4 hours → must resolve by 01:00 PM
Current time: 12:30 PM
Time remaining: 30 minutes ← ALERT triggered!
─────────────────────────────────────────────

Assignment Group

An assignment group is a team of people who work on tickets together. Incidents get assigned to an assignment group (like "Network Support" or "Desktop Team"), and then a specific team member picks it up. This keeps work organized across large IT teams.

State

The state field shows where a ticket is in its lifecycle. Common states for an incident include: New, In Progress, On Hold, Resolved, and Closed. Each state change gets logged with a timestamp and the user who made the change.

Sys ID

Every record in ServiceNow has a hidden unique identifier called a sys_id. It is a 32-character string like 8c3b1f9a3c3b1f9a3c3b1f9a3c3b1f9a. Developers and administrators use sys_id values when building scripts or integrations that reference specific records.

CI (Configuration Item)

A CI is any IT asset tracked in the system — a laptop, a server, an application, a network switch. CIs live in the CMDB (Configuration Management Database). When an incident affects a specific server, the incident links to that server's CI record.