Event and Alert dashboard

  • Release version: Zurich
  • Updated July 31, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Event and Alert dashboard

    The Event and Alert dashboard leverages Performance Analytics to provide ServiceNow customers with real-time insights into events and alerts managed through Event Management. It offers visibility into key metrics such as noise reduction, alert grouping coverage, and identifies the most impacted configuration items (CIs). This enables teams to monitor trends and outcomes effectively, improving operational awareness and response efficiency.

    Show full answer Show less

    Prerequisites and Access

    • Prerequisites: The Event Management application must be installed.
    • Required roles: Users need evtmgmtadmin or evtmgmtoperator roles to interact with the dashboard appropriately.
    • Enabling historical data: Run the [PA EM] Historic Data Collection job from Performance Analytics Data Collector Jobs to partially collect historical Event Management data.
    • Access methods: The dashboard can be opened via All > AIOps Dashboards > AIOps Operational > Events and Alerts or through the Service Operations Workspace under AIOps Dashboards.

    Key Features

    • Noise reduction: Displays the compression rate from events to alerts, helping reduce alert noise and focus on significant incidents.
    • Alerts grouping coverage: Shows the percentage of alerts aggregated into grouped alerts over time to simplify alert management.
    • Incident compression rate: Indicates the percentage of alerts resolved without incident creation, reflecting event resolution efficiency.
    • Top alert and event sources: Bar charts highlight the main sources of alerts (last 7 days) and events (last 5 days), categorized by severity, aiding in source identification.
    • Alerts without CI binding: Line graph tracking alerts that lack association with configuration items in the past 7 days.
    • Alerts grouping distribution: Bar chart showing how grouped alerts are distributed over the last 7 days.
    • Most Impacted Configuration Items: Provides detailed information about CIs most affected by alerts, including name, alert count, classification, location, owner, and support group, facilitating focused incident resolution and prioritization.

    Use Cases and Roles

    • Administrators (evtmgmtadmin): Can edit the dashboard, grant view and share permissions to other users.
    • Operators (evtmgmtoperator): Can view the dashboard and drill down into records to track events, alerts, trends, and outcomes for operational decision-making.

    Practical Benefits

    By utilizing this dashboard, ServiceNow customers can:

    • Gain a consolidated view of event and alert trends in real time.
    • Reduce alert noise and improve incident management efficiency.
    • Identify key sources of alerts and events to focus remediation efforts.
    • Prioritize critical configuration items impacted by alerts, supporting faster and targeted incident resolution.

    The Event and Alert dashboard uses Performance Analytics to provide real-time visibility into events and alerts in Event Management, showcasing key trends, outcomes, and the most impacted configuration items. It highlights metrics such as noise reduction, alert grouping coverage, and top alert sources.

    Events and Alerts dashboard.

    Run the [PA EM] Historic Data Collection job once to enable the partial collection of historical Event Management data:
    1. Navigate to All > Performance Analytics > Data Collector > Jobs.
    2. Select [PA EM] Historic Data Collection.
    3. Select Execute Now.

    Prerequisites

    Ensure that the Event Management application is installed.

    Required ServiceNow AI Platform roles

    • evt_mgmt_admin
    • evt_mgmt_operator

    Access the Events and alerts dashboard

    To open the dashboard, use one of the following methods:
    • Navigate to All > AIOps Dashboards > AIOps Operational > Events and Alerts.
    • Navigate to Workspaces > Service Operations Workspace and select the AIOps Dashboards icon (AIOps Dashboards icon.).

      By default, the Events and Alerts tab is selected.

    Use cases

    For examples of how different people in your organization would use this dashboard, see these use cases.
    User Dashboard use
    evt_mgmt_admin or admin Edit the dashboard and grant view and share permissions.
    evt_mgmt_operator or admin View the dashboard and details of the records contained in it to visualize and track events, alerts, trends, outcomes, and the most impacted Configuration Items in your organization.

    Breakdowns

    Breakdowns available in the Event and Alert dashboard are:

    • Trends
    • Outcomes

    Reports

    Title Type Description
    Noise reduction (events to alerts compression) Line graph The compression rate from events to alert creation. The higher the number, the fewer alerts are being created.
    Alerts grouping coverage Line graph The percentage of alerts aggregated into grouped alerts over time.
    Incident compression rate

    Line graph

    The percentage of alerts that did not result in incident creation. A higher percentage means more alerts were resolved without generating incidents.
    Top 20 alert sources (last 7 days) Bar chart The number of alerts per source categorized by severity over the last 7 days.
    Top 20 event sources (last 5 days) Bar chart The number of events per source categorized by severity over the last 5 days.
    Alerts without CI (created on last 7 days) Line graph The number of alerts without CI binding created over the last 7 days.
    Alerts grouping (last 7 days) Bar chart The distribution of grouped alerts over the last 7 days.

    Most impacted Configuration Items

    The Most Impacted Configuration Items section of the Event and Alert dashboard provides a comprehensive overview of the configuration items (CIs) that are most impacted by the issue. This section lists key details such as the name of each CI, the number of associated alerts, their classification (such as application service), and location. Additionally, it identifies the owner and support group responsible for each CI, facilitating targeted and efficient incident resolution. By highlighting the most impacted CIs, this section helps prioritize critical assets and resources, ensuring that the most significant issues are addressed promptly to maintain system stability and performance.