---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Alert enrichment automations

# Alert enrichment automations {#ariaid-title1}

Release version: Australia  
Updated December 19, 2024  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure alert enrichment rules to automatically add context and metadata to incoming alerts for better analysis and response.

## Before you begin

Verify you have installed the ITOM
AIOps and ServiceNow Otto for IT Operations Management (ITOM) plugins.

Ensure you're in the Configure IT Operations Management page.

Role required: evt_mgmt_admin or evt_team_operator

## About this task

Alert enrichment rules automatically enhance incoming alerts with additional context such as configuration item details, service mappings, and operational metadata. This enrichment helps operations teams understand the
business impact and take appropriate action more quickly.

## Procedure

1. Navigate to Configuration SummaryEvent ManagementAlert response.
2. Expand Alert response.
3. Select Enrich alerts.  
   A list of enrich alert automations appear.
4. Select +Create automation.  
   The Enrich alerts page opens.
5. Follow the steps in [Create Enrich automation](https://www.servicenow.com/docs/4GImRp4FbaV8sSboo7rJ7Q "Alert enrichment involves transforming raw events from monitoring tools into a standard format, aiding automated grouping and response. This includes extracting fields from lengthy alert payloads or composing them into a standardized format. Additionally, you can create tags, which are metadata added to alerts for easier filtering and grouping.").
6. To complete the setup, select Mark as configured.
{#enrich-alerts__steps_ipn_t1y_1jc}

*[\>]: and then