---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# New DEX event form

# New DEX event form {#ariaid-title1}

Release version: Brazil  
Updated October 22, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The New record form for DEX event monitoring enables you to add events to monitor.
{#new-dex-event-form__table_lhm_x42_j3c__entry__2}

| Field | Description |
|-|-|
| Name | Name of the event, for example, "Application crash." |
| OS Type | Operating system for which the event is configured: * Windows * macOS {#new-dex-event-form__ul_i5l_s52_j3c} |
| Query Type | Message pattern used to identify the event in the log: * Contains (Substring) is used for plain-text matching. * Regex (Pattern Matching) is used for regular expression matching. {#new-dex-event-form__ul_lpk_j52_j3c} |
| Active | Option that activates the event when selected. When the check box is cleared, the event is inactive. |
| Application | Application that owns the record. The default is Application and Device Health. |
| Event message | Message for which the event rule searches to trigger an alert. This field is optional on Windows devices, and required on macOS devices. |
| Domain | Domain of the record. The default is global. The record is visible across all domains. |
| Log level | Severity level of the log event being monitored, such as Debug, Error, Fault, Info, or Warning. |
| macOS Category | Logging category associated with the event, used to narrow down log sources. This field only appears for the events on macOS devices. Adding a category can improve performance and accuracy. |
| macOS Process | Specific process that generates the event (for example, kernel or loginwindow). This field only appears for the events on macOS devices. Adding a process can improve performance and accuracy. |
| macOS Subsystem | Subsystem identifier (typically in reverse-domain notation, such as com.apple.Authorization) used to filter logs. This field only appears for the events on macOS devices. |
| Windows Event ID(s) | Numeric ID used to identify the event in the Windows Event Log. This field only appears for the events on Windows devices. |
| Windows Log Source | Source where the event is recorded, such as Application, System, or Security. This field only appears for the events on Windows devices. |
[Table 1. Event Log Monitoring Config new record fields]

{#new-dex-event-form__table_lhm_x42_j3c}