---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Configure event collection from email

# Configure event collection from email {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure an inbound email action to send email notifications when events and alerts
are triggered.

## Before you begin

Role required: evt_mgmt_admin

## About this task

When you add an inbound email action to send email, Event Management uses inbound email actions to process inbound email in the same manner as any external event. The email content is used to generate and update events, use rules to generate alerts, or change event severity. The severity is updated after the impact calculation and stored in the em_impact_status table.

## Procedure

1. Navigate to AllSystem PropertiesEmail Properties.
2. In the Inbound Email Configuration section, in the Email receiving enabled option, select Yes to enable the collection of events from email.
3. To configure the email information to pass to Event Management for event and alert processing, navigate to System PolicyEmailInbound Actions and in the list of Inbound Email Actions records search for and open the default create event form.
   1. On the Inbound Email Actions form, specify these values.  
      {#t_EMConfigureEmailConnector__choicetable_csq_d2r_rt__entry__2}

      | Field | Value |
      |-|-|
      | Active | Select the check box to enable the email notification. |
      | Target table | Select Event \[em_event\]. |
      | Action type | Select Record Action. |
      [ ]

      {#t_EMConfigureEmailConnector__choicetable_csq_d2r_rt}
   2. Select the Description tab and enter a description for the email message.
   3. Select the Actions tab and select these Field Actions.  
      * \[Severity\] \[To\] \[\<the event severity\>\]
      * \[Type\] \[From email\] \[\<portion of the email\>\]

        For example, you can select
        Subject as the portion of the
        email to use.
      {#t_EMConfigureEmailConnector__ul_gxv_hfr_rt}
   {#t_EMConfigureEmailConnector__substeps_tkj_b2r_rt}
4. To customize the inbound parameters and map the text to event variables, add a Script.  
   For example:


       current.source = 'email';
       current.event_class = 'email';
       current.description = email.body_text;
       current.time_of_event = new GlideDateTime();
       current.insert();

5. From the instance, send an email that contains matching data, and then confirm that the event or alert information appears in Event Management.  
   For more information sending email messages to create an instance, see [Inbound email actions](https://www.servicenow.com/docs/access?context=c_InboundEmailActions&version=australia&pubname=australia-platform-administration&ft:locale=en-US).  
   Note:  
   Ensure that the user who sends the email has the role evt_mgmt_integration.
6. Select Submit.

## Result

The inbound email is sent to the em_event table and regular Event Management processes continue, for example, event rules and alert management rules run.

*[\>]: and then