Orlando IT Operations Management

Orlando IT Operations
Management
Last updated: May 14, 2020

PDF generated on May 31, 2020

©2020 ServiceNow. All rights reserved. Terms of Use Privacy Statement
ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in
the United States and/or other countries. Other company and product names may be trademarks of the respective companies with which
they are associated.
AH Formatter V6.3 R1 http://www.antennahouse.com/
 Orlando IT Operations Management

Some examples and graphics depicted herein are provided for

illustration only. No real association or connection to ServiceNow
products or services is intended or should be inferred.
This PDF was created from content on docs.servicenow.com. The web
site is updated frequently. For the most current ServiceNow product
documentation, go to docs.servicenow.com.
If you have comments about this documentation, submit your feedback
to: docfeedback@servicenow.com

Company Headquarters
2225 Lawson Lane
Santa Clara, CA 95054
United States
(408)501-8550

PDF generated on May 31, 2020 2

©2020 ServiceNow. All rights reserved. Terms of Use Privacy Statement

ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the
United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are
associated.
AH Formatter V6.3 R1 http://www.antennahouse.com/
 Orlando IT Operations Management

Event rules
Use event rules to generate alerts for tracking and remediation. Event rules are stored in
the Event Rule [em_match_rule] table. Configure and customize event rules to manage
events and alert generation.

Event rules do not change the event records in the Event table. Changes to event data
are stored in the ServiceNow instance memory.

Use the Event rule designer to create and configure event rules. See the following video:

You can use the default event rules or event rules that you have created to:

• Apply an event rule filter to determine whether the rule applies to an event.

• Apply a transform with Event Match Fields and optional Event Compose Fields to
format the alert text.

• Apply a threshold to create custom alerts for rapidly recurring events.

• Automatically create or close alerts.

• Bind alerts to CI information from the CMDB.

Note: Only one rule is applied to each event, according to the filter applied to the
events. Multiple event rules do not apply to an event.

• Create or edit an event rule

You can create event rules to generate alerts for tracking and remediation.

• Use event input information

The Event Input pane that is included in the steps to create an event rule provides a
reference to the information that you can use when configuring an event rule.

• Filter the events that an event rule applies to

PDF generated on May 31, 2020 3

©2020 ServiceNow. All rights reserved. Terms of Use Privacy Statement

ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the
United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are
associated.
AH Formatter V6.3 R1 http://www.antennahouse.com/
 Orlando IT Operations Management

Define a filter to restrict to which events the event rule must apply. Configure the filter
by providing a set of conditions that each event must match to be either excluded or
included from applying to the event rule.

• Find events that are not matched to rules

Find events that are not matched to any rules, and determine if it is necessary to
create event rules to manage them.

• View event rules

You can view all event rules on the Event Rules list.

• Find rules that were applied to events or alerts

View the rules that were applied to events and alerts to confirm how events are
processed.

• Configure an event rule to customize alert content

You can configure an event rule to customize alert content. You can customize the
order of the fields and select which fields display. The fields in the left-hand work area
of the Transform and Compose Alert Output section of an event rule are the fields that
appear in the generated alert.

• Set a threshold to suppress alert generation

The event threshold is the rate upon which Event Management generates an alert.
Receiving multiple events for a device over a short interval may warrant creating an
alert, as the condition may be serious. However, receiving events over a longer
interval may indicate a less serious situation which would not warrant creating an alert.

• Alert binding to CIs with event rules

When alerts are associated with CIs, the task of remediation is simplified. During alert
generation, Event Management uses event rules and other mechanisms to
automatically bind alerts to CI information from the CMDB. For tracking purposes and
remediation, the alert shows information about the CI that caused the event.

• Custom alert fields

You can populate custom alert fields with data contained in Additional information
field of the event.

• View patterns for event group creation

PDF generated on May 31, 2020 4

©2020 ServiceNow. All rights reserved. Terms of Use Privacy Statement

ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the
United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are
associated.
AH Formatter V6.3 R1 http://www.antennahouse.com/
 Orlando IT Operations Management

Event groups are sets of events that do not have a matching event rule. You can view
the patterns in a group of events to learn the impact of creating a rule based on the
event source and description patterns.

PDF generated on May 31, 2020 5

©2020 ServiceNow. All rights reserved. Terms of Use Privacy Statement

ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the
United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are
associated.
AH Formatter V6.3 R1 http://www.antennahouse.com/