Issue
While pushing the offense from QRadar to ServiceNow we are getting "Encountered error creating Security Incident in ServiceNow".
Resolution
Assign the roles "sn_si.integration_user" and "sn_si.read" role to the configured user in QRadar.
Related Links
https://docs.servicenow.com/csh?topicname=qradar-landing-page.html&version=latest