---
sourceDocument: Zurich IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/it-operations-management

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Alert table clean up

# Alert table clean up {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Scheduled Jobs feature runs a script to automatically close alerts in the Alerts \[em_alert\] table that meet specific conditions, helping reduce alert noise and keep the system clean and efficient.

## Before you begin

Role required: evt_mgmt_admin

## About this task

When the Event Management plugin is activated, by default a job is scheduled to run the <kbd class="ph userinput">Event Management - auto close alerts</kbd> script to automatically close alerts in the alerts table that meet the specified
conditions. The default retention policy for closed alerts is that the system deletes closed alerts if it is not updated for 90 days. For more information on the scheduled job, see [Table cleaner](https://www.servicenow.com/docs/access?context=table-cleaner&version=zurich&pubname=zurich-platform-administration&ft:locale=en-US).

Due to the high level of traffic to the table, you cannot audit the Alert table \[em_alert\] as a whole. Instead, audit selected fields of interest on the table.

## Procedure

1. Set the table to `audit = true`.
2. Set `audit = true` on the relevant fields.  
   To avoid an excess of audit records, audit only the fields that are necessary for auditing.
{#auto-close-alerts__steps_pkm_4ww_gyb}

## Result

The <kbd class="ph userinput">Event Management - auto close alerts</kbd> script runs automatically and repeatedly at the scheduled time and closes alerts that meet the specified conditions.
**Related concepts**   

* [Rotate event and alert table for cleanup](https://www.servicenow.com/docs/6awxnydD393vq7gNG7EAhQ "The growth of data tables impedes performance. Preserve instance performance by event table rotation and alert table cleanup for status and alert history retention.")  
**Related tasks**   

* [Modify event table rotation](https://www.servicenow.com/docs/vk~TkfWvHaVIC8ta24a1zA "Table rotation is used by Event Management, by default, to contain the growth of event [em_event] tables within the rotation table group.")
* [Purge impact status and alert history](https://www.servicenow.com/docs/CGcpDcUYjOuwEnwSpg1Lng "Automatically cleans up outdated impact statuses and alert history from the database to free up space, improve system performance, and ensure only relevant data is retained.")

