---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Creating an event rule

# Creating an event rule {#ariaid-title1}

Release version: Brazil  
Updated October 23, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Event rules define the events to monitor and the criteria that trigger an alert.  
Creating an event rule involves these tasks, in order:

1. [Select event rule filters](https://www.servicenow.com/docs/5gO9CK5RlXmH_h_8iQatOg "Configure event rule filters to target specific devices and users by operating system, location, department, or custom conditions.").
2. [Define alert criteria](https://www.servicenow.com/docs/wzQ9Z03_xOyzTNJ0jPFIwA "Specify the event alert criteria by choosing the alert severity, defining thresholds, and specifying conditions for when the alert must be triggered.").
3. [Define alert rule name and status](https://www.servicenow.com/docs/YLt1uX71n8i2564~tTPezw "Define alert rule attributes, including the name and state, such as active or inactive.").
{#creating-an-event-rule__ol_ndv_krw_d1c}