---
sourceDocument: Zurich IT Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/it-service-management

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich IT Service Management

ft:clusterId :

    - itsm

bundleId :

    - itsm

workflow :

    - Technology


---

# Define alert criteria

# Define alert criteria {#ariaid-title1}

* Release version: Zurich
* 
* Updated April 27, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Specify the event alert criteria by choosing the alert severity, defining thresholds, and specifying conditions for when the alert must be triggered.

## Before you begin

Role required: sn_dex.admin

## Procedure

1. In the Alert severity field, select a severity for the alert.
2. Define the thresholds for the alert.
3. **Optional:** Add another alert severity level by selecting Add another alert severity.
4. In the Alert when section, select a time period.
5. **Optional:** Under Clear the alert when, define the conditions for when to clear the alert.
6. Select Next.
{#define-alert-criteria-event__steps_r1m_lcq_bjc}

## What to do next

[Define alert rule name and status](https://www.servicenow.com/docs/Acov0Wcj6bgCWonLgFw3Kg "Define alert rule attributes, including the name and state, such as active or inactive.").