---
title: Define indicator-indicator relationships
description: Define relationships between the indicator object and other Use the relationships objects to link together two observables or an observable and SDO to explain how they relate to each other..
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/define-indicator-indicator-relationships.html
release: australia
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Relationships Objects, TISC Library Repository, Threat Intel Library, Use, Threat Intelligence Security Center, Security Operations]
---

# Define indicator-indicator relationships

Define relationships between the indicator object and other Use the relationships objects to link together two observables or an observable and SDO to explain how they relate to each other..

## Before you begin

Role required: sn\_sec\_tisc.analyst

## Procedure

1.  Navigate to **Workspaces** > **Threat Intelligence Security Center**.

2.  Click on **Threat Intel Library** icon on the workspace.

3.  Go to **Relationships** > **Indicator-Indicator**.

4.  Click **New**.

5.  Complete the fields in the form as appropriate.

<table id="choicetable_uvs_2cc_nzb"><thead><tr><th align="left" id="d334963e98">

Field

</th><th align="left" id="d334963e101">

Description

</th></tr></thead><tbody><tr><td id="d334963e107">

**Description**

</td><td>

Specifies the threat source from which this record is created.

</td></tr><tr><td id="d334963e116">

**Domain**

</td><td>

Defines the scope of the object record. The value in this field is auto populated.

</td></tr><tr><td id="d334963e127">

**Target Indicator**

</td><td>

Select and define the target indicator object.

</td></tr><tr><td id="d334963e136">

**Relationship Type**

</td><td>

A description that provides more details and context about the relationship type. Define the relationship direction whether it is direct or inverse.

-   Inverse - This is the type of relationship between the observable and object.
-   Direct - This is the type of relationship between the object and observable.


</td></tr><tr><td id="d334963e156">

**Source Indicator**

</td><td>

Select and define the source object indicator.

</td></tr></tbody>
</table>6.  Click **Submit**.


**Parent Topic:**[Relationships Objects](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/relationship-objects.md)