Exclude patterns from learned patterns

task australia Updated Sep 10, 2026 1 min read exclude-learned-patterns.md

Exclude CI-based or CI class-based alerts and patterns when you encounter alerts incorrectly added to a learned pattern by the Learned Patterns job. For example, a pattern might include an alert that occurred at the same time as other alerts but is not actually related to them. This maintains accuracy, ensuring better alert groupings and improved management efficiency.

Before you begin

Role required: evt_mgmt_admin

About this task

You select the incorrect alert in a pattern to exclude the entire pattern to which it belongs.

Note: When you exclude an incorrect alert, any other patterns containing that alert are also excluded.

Procedure

Navigate to All > Event Management > Reporting > Learned Patterns.

[Omitted image "em-exclude-pattern-nav.png"] Alt text: Exclude pattern navigation
On the Learned Patterns page, expand the anomalous pattern.

[Omitted image "em-expanded-patterns.png"] Alt text: Expanded patterns
Select the pattern name to open it for exclusion.
On the SA Alert Aggregation Learned Pattern page, select Exclude.

[Omitted image "em-pattern-exclude.png"] Alt text: Option to exclude the selected pattern

Result

The entire pattern is removed from the Learned Patterns report and listed on the Excluded Patterns page, located at Event Management > Administration > Excluded patterns.

If the pattern includes other alerts, you can restore it by reclaiming those alerts as a learned pattern. For further details, see Restore excluded patterns.

52 lines · 2.6 KB Wrap lines

---
title: Exclude patterns from learned patterns
description: Exclude CI-based or CI class-based alerts and patterns when you encounter alerts incorrectly added to a learned pattern by the Learned Patterns job. For example, a pattern might include an alert that occurred at the same time as other alerts but is not actually related to them. This maintains accuracy, ensuring better alert groupings and improved management efficiency.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/event-management/exclude-learned-patterns.html
release: australia
product: Event Management
classification: event-management
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Automated alert grouping, Alert grouping types and creation methods, Alert grouping, Configure, Event Management, ITOM AIOps, IT Operations Management]
---

# Exclude patterns from learned patterns

## Before you begin

Role required: evt\_mgmt\_admin

## About this task

You select the incorrect alert in a pattern to exclude the entire pattern to which it belongs.

**Note:** When you exclude an incorrect alert, any other patterns containing that alert are also excluded.

## Procedure

1. Navigate to **All** &gt; **Event Management** &gt; **Reporting** &gt; **Learned Patterns**.

\[Omitted image "em-exclude-pattern-nav.png"\] Alt text: Exclude pattern navigation

2. On the Learned Patterns page, expand the anomalous pattern.

\[Omitted image "em-expanded-patterns.png"\] Alt text: Expanded patterns

3. Select the pattern name to open it for exclusion.

4. On the SA Alert Aggregation Learned Pattern page, select **Exclude**.

\[Omitted image "em-pattern-exclude.png"\] Alt text: Option to exclude the selected pattern

## Result

The entire pattern is removed from the Learned Patterns report and listed on the Excluded Patterns page, located at **Event Management** &gt; **Administration** &gt; **Excluded patterns**.

If the pattern includes other alerts, you can restore it by reclaiming those alerts as a learned pattern. For further details, see [Restore excluded patterns](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/restore-excluded-patterns.md).