--- sourceDocument: Australia IT Operations Management sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # AIOps AI Specialist # AIOps AI Specialist {#ariaid-title1} Release version: Australia Updated November 1, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 6 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of AIOps AI Specialist The AIOps AI Specialist is an AI-powered team member within ServiceNow designed to assist IT operations teams by automating routine alert triage. It handles the initial review of alerts by triaging, reducing noise, identifying probable causes, mapping impact, and suggesting next steps, allowing human operators to focus on complex decision-making. Operators retain control, as no changes occur without their approval. Show full answer Show less ## Key Features * **Alert Triage and Noise Reduction:** Automatically filters alerts to close insignificant ones, ensuring operators focus on alerts that require human judgment. * **Root Cause and Impact Analysis:** Identifies probable causes using related alerts, recent changes, and knowledge articles, and maps affected services. * **Knowledge Lookup:** Utilizes configured knowledge bases to inform investigations, leveraging internal playbooks and historical data. * **Remediation Suggestions:** Recommends automation actions from alert management rules for operator review and activation. * **Operator Control and Transparency:** All AI actions are logged on alerts, with operators able to review, reopen closed alerts, and control remediation activation. * **Scoped Operations:** The AI Specialist only works on alerts matching configured scope conditions to ensure relevancy and accuracy. * **Role and Permissions:** The AI Specialist is onboarded like a team member with a specific operator role but cannot modify configurations or system settings. ## Value to ServiceNow Customers * **Improved Efficiency:** Automates the slowest parts of investigations by gathering context and triaging alerts, reducing manual effort. * **Reduced Alert Noise:** Deflects insignificant alerts to minimize operator overload and focus their attention on critical issues. * **Consistent and Faster Investigations:** Ensures every alert receives uniform checks 24/7, accelerating resolution times. * **Consolidated Context:** Presents telemetry, change data, knowledge, and service information in a single summary, reducing tool switching. * **Scalable Operations:** Absorbs increasing alert volumes without extra hiring, maintaining team capacity for strategic tasks. * **Audit and Trust:** Maintains detailed logs of AI decisions, with supervisors able to review and reopen alerts if necessary. ## Operational Details The AI Specialist runs a consistent workflow for each alert: checking scope, investigating, making closure decisions based on evidence, ranking remediation options, and handing off findings to operators. It closes alerts only when supported by historical data or service impact evidence, never hiding alerts silently. The AI's findings, summaries, and decision rationale are recorded directly on the alert for transparency. ## Prerequisites and Limitations * Requires ServiceNow platform Australia Patch 8 or later, along with specific ITOM and AIOps application versions. * Only one AIOps AI Specialist can be active per instance; domain separation is not supported. ## Management and Use Cases Admins and AIOps managers can onboard, configure, tune, activate, deactivate, and monitor the AI Specialist via the Service Operations Workspace. Operators and supervisors review AI findings, handle exceptions, and activate suggested remediations. Typical use cases include noise reduction, speeding investigations, and automating routine fixes through runbook integration. The AIOps Manager can create, configure, and manage an AI specialist. AI specialist is an AI-powered team member (not human) that works alongside your operators, handling routine alert triage so your people can focus on what requires human judgment. The AIOps AI Specialist is an AI team member that takes the first pass on every in-scope alert. It triages the alert, reduces noise, identifies the likely cause, maps the impact, and suggests a next step. Your operators review the findings and make the final decision. Nothing changes in your environment until an operator approves it. ## The problem it solves Operations teams often lose time before they can fix anything. Alerts arrive faster than operators can read them, and real problems can hide in the noise. Each investigation also means switching between monitoring tools, the CMDB, knowledge articles, and change records. Every minute spent gathering context adds to resolution time. ## What the specialist is The specialist is onboarded the way you would onboard a new operator. It has a name, a team assignment, and the Operator role (evt_mgmt_operator). It works on the alerts that match the scope you define. The specialist is deliberately limited. It cannot change team configurations, create other specialists, or modify system settings. ## Value to your team {#ai-specialist-aiops-overview__section_aiops_specialist_1} The specialist moves the slowest part of an investigation, gathering context, from operators to the AI. Benefits your team will notice * A queue that matches the work. Noise leaves the queue, so operators see the alerts that need judgment first. * Faster, more consistent investigations. Every in-scope alert gets the same checks, at any hour, on every shift. * Less tool switching. Telemetry, changes, knowledge and service data arrive in one summary. * Easier handoffs. Findings are written to the alert, so the next person does not start from zero. * Growth without extra hiring. The specialist absorbs rising alert volume, and operators spend their time on work that needs people. * Trust you can inspect. The AI Specialist records the reason for closing an alert, and the supervisor can choose to reopen it. {#ai-specialist-aiops-overview__ul_tg2_mkb_clc} {#ai-specialist-aiops-overview__table_aiops_specialist_1__entry__2} | Value | What changes for your team | |-|-| | Alert deflection | Insignificant alerts close before an operator opens them. The queue holds the alerts that need judgment. | | Faster resolution | Root cause, impact, and next steps are ready when an operator opens the alert. | | Lower cost per alert | Routine triage and investigation run automatically, which reduces manual effort. | | Capacity | The specialist absorbs alert growth, so operators spend more time on work that needs people. | [Table 1. Value of the AIOps AI Specialist] {#ai-specialist-aiops-overview__table_aiops_specialist_1} Note: Time-saved figures are estimates. They multiply the alerts that the specialist closes and analyzes by the minutes that you configure for each. ## What the AIOps specialist does {#ai-specialist-aiops-overview__what-ai-worker-does} Each capability is a task module that you can turn on or off. {#ai-specialist-aiops-overview__what-ai-worker-does__entry__4} | Capability | What the specialist does | Task module | Operator action | |-|-|-|-| | Triage | Checks each alert against the scope conditions and assigns matching alerts to its queue. | Scoping | None, automatic | | Noise reduction | Closes alerts that history or service impact shows need no action. | Noise reduction | Review closed alerts | | Root cause analysis | Names a probable cause, with supporting evidence from related alerts, recent changes, and knowledge articles. | Investigation | Review findings | | Impact analysis | Maps the alert to affected service instances, service offerings, and technical business services. | Investigation | Review findings | | Knowledge lookup | Reads the knowledge bases that you select, so the investigation uses your playbooks and history. | Investigation | Review references | | Remediation suggestions | Finds automation that is available as alert management rules and ranks the best actions. | Remediation | Activate the action | [Table 2. AIOps AI Specialist capabilities] ## Specialist monitoring and value per role {#ai-specialist-aiops-overview__role-and-permissions} The AIOps Manager \[evt_aiops_manager\] can create the AIOps specialist in Service Operations Workspace. {#ai-specialist-aiops-overview__table_s4v_hkb_clc__entry__4} | Role | Role system name | What they do with the specialist | What they gain | |-|-|-|-| | Admin | evt_mgmt_admin | * Onboards and configures, tests, activates and deactivates the specialist. * Reviews metrics for all teams. {#ai-specialist-aiops-overview__ul_ccx_1lb_clc} | One place to prove impact and control scope. | | AIOps manager | evt_aiops_manager | * Creates, configures and tunes the specialist for the teams they run. * View metrics for the teams they manage {#ai-specialist-aiops-overview__ul_ddq_glb_clc} | Control over what the AI handles, and proof it is working. | | Operator or supervisor | evt_mgmt_operator | Reviews AI findings, checks closed alerts, activates remediations, handles only what needs a person. | A shorter queue and a head start on every alert that remains. | [ ] {#ai-specialist-aiops-overview__table_s4v_hkb_clc} ## Operator control {#ai-specialist-aiops-overview__section_aiops_specialist_2} The specialist does the investigation. Your operators keep the decisions. * Fixed role. The specialist cannot change team configurations, create specialists, or modify system settings. * Defined scope. The specialist works only on alerts that match every active scope condition. * Visible work. Every action is logged on the alert. Operators can review closed alerts and reopen them. * Evidence behind closures. It closes an alert only when history, knowledge or service impact supports closing it. Otherwise, the alert stays open with the findings attached. * Staged autonomy. Noise reduction and remediation are separate settings, so you can grant autonomy one step at a time. * An operator must activate every remediation. {#ai-specialist-aiops-overview__ul-aiops-specialist-1} ## How the specialist works {#ai-specialist-aiops-overview__section_aiops_specialist_3} The specialist follows the same path on every alert. It checks the scope, investigates, decides whether to close, ranks a fix, and hands the result to a person. Every alert follows one path, and a person take the last step. {#ai-specialist-aiops-overview__table_arb_v3b_clc__entry__3} | Decision | Rule | What it protects | |-|-|-| | In scope? | The alert must match every scope condition. | The AI works only on alert types it handles well. Everything else goes to operators. | | Outcome? | An insignificant alert can be auto-closed when noise reduction is on. An error leaves the alert open. Anything else continues. | A failure never hides an alert. | | Close or keep open? | It closes only when the evidence supports closing, and it cites that evidence. Otherwise, it keeps the alert open and says why. | No silent deflection. | | Rank fixes | Runs only when Suggest remediation is on and linked automation exists. It ranks. It never runs. | No change to your environment without a person. | | Final step | Every run ends the same way: findings written, state updated, run logged. | No alert is left half-handled. | [Table 3. Decision rules] {#ai-specialist-aiops-overview__table_arb_v3b_clc} Figure 1. AIOps AI Specialist workflow ## How it decides to close an alert {#ai-specialist-aiops-overview__how-it-decides-to-close} The specialist closes an alert for one of two reasons, and both leave a record. * It is noise. Historical alerts have repeatedly resolved without action, or the alert has no meaningful effect on a service. Alerts that tend to be closed without human action, without escalation, or that follow a consistent trend tend to be noisy alerts. * The evidence says it is expected. The verification step gathers knowledge articles, related incidents, earlier AI insights and up to ten recent work notes. It then checks them against the alert. {#ai-specialist-aiops-overview__ul_x51_yjb_clc} For example, a knowledge article states that brief frame loss during a routing reconvergence is expected and clears on its own. The alert matches the device and the time window and shows no error counters. The specialist closes it and cites the article. The specialist is just as careful in the other direction. If a known pattern almost fits, such as a nightly batch article for a different host, it keeps the alert open. It states exactly why the article does not apply. ## What it records {#ai-specialist-aiops-overview__what-it-records} * An insight on the alert. Overview, what is affected, probable cause, who should look, and the next step. * A work note summary. The AI summary is appended to the alert's work notes. * An investigation report. A sanitized report is stored on the alert. * Live processing steps. Progress labels, for example, Analyzing alert and Summarizing impact, show what is happening. * Activity stream entries. Each closure is logged so supervisors can review it. * A run record. One record per run with its objective, start and end time, duration, state and the full conversation, as an audit trail. {#ai-specialist-aiops-overview__ul_zm1_yjb_clc} ## Prerequisites {#ai-specialist-aiops-overview__section_mh4_gcw_jjc} * Platform version Australia Patch 8 or later. * ServiceNow Otto for IT Operations Management (ITOM) application, version 2.10.0 or later. * AIOps Experience application, version 27.2.68 or later. * AIOps AI Specialist (sn_ai_aiops_force) plugin, version 3.0.0 or later. ## Known limitation {#ai-specialist-aiops-overview__section_gfr_3nj_1lc} Each instance supports only one AIOps AI Specialist. Your organization can use only one AI Specialist for AIOps. ## Domain separation support for AIOps AI Specialist {#ai-specialist-aiops-overview__domain-separation-support} AIOps AI Specialist isn't supported on domain-separated instances. Only one AIOps AI Specialist can be active, so you can't set up a separate AI specialist with its own configuration for each domain. * **[AIOps AI Specialist use cases](https://www.servicenow.com/docs/wIa312a1hDExF_1nJaaAtw)** Three scenarios show how teams typically use the AIOps AI Specialist to reduce noise, speed up investigations, and turn runbooks into fixes. * **[Onboard the AIOps specialist](https://www.servicenow.com/docs/EPWsInai4qktvpbUm8JGCw)** Add the AIOps specialist to your team so it can start receiving and acting on alerts by assigning it a name, a role, and one or more teams. * **[Deactivate the AIOps AI Specialist](https://www.servicenow.com/docs/a73~vlOyX71Ket2s7bF~dQ)** Deactivate the AIOps specialist to pause all its operations. Your configuration is preserved and you can reactivate it at any time. * **[Manage the AIOps AI Specialist](https://www.servicenow.com/docs/PCQPDF9i3nExsmAKdT1R9g)** Use the AIOps home page to view and manage the alerts assigned to the AIOps AI Specialist. This page is the default home page of the Service Operations Workspace. Which view you see depends on your role. **Previous topic:** [ITOM AIOps specialists](https://www.servicenow.com/docs/ZkpKAYwwkjfiwDf2B5A0vw "Learn about the ITOM AI specialists and the workflows they support.") **Next topic:** [AIOps AI Specialist use cases](https://www.servicenow.com/docs/wIa312a1hDExF_1nJaaAtw "Three scenarios show how teams typically use the AIOps AI Specialist to reduce noise, speed up investigations, and turn runbooks into fixes.") **Related topics** * [Autonomous Workforce](https://www.servicenow.com/docs/access?context=ai-workforce&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US) * [AI specialists](https://www.servicenow.com/docs/access?context=now-assist-ai-specialist&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US)