Select event rule filters

task brazil Updated Oct 23, 2026 1 min read event-rule-select-filters.md

Configure event rule filters to target specific devices and users by operating system, location, department, or custom conditions.

Before you begin

Confirm that the DEX plugin (sn_dex) is installed.

Role required: sn_dex.admin

Procedure

In the primary navigation pane, select the DEX Administration icon ([Omitted image "icon-administration.png"] Alt text:).
Select Configure on the Alert rules card.

The list of alert rules appears.
Select Create new rule > Event rule.

A new tab opens for the Create metric rule window, with the Select filters option preselected in the navigation pane.
Select an operating system under Select OS type.
Select the Applicable for Non-persistent VDIs toggle switch to apply this event rule to all the non-persistent virtual desktop infrastructures (VDIs).

Note: When this toggle switch is on, only the Location option is available in the Apply filtering for devices field.
Apply conditional filtering for a device or a user.

The predefined filtering choices are Device and User.

To add more filters, select + New condition set.

Note:
- Administrators can filter by selecting any available column from the Device (cmdb_ci_computer) or User (sys_user) tables. After a column is used as a filtering condition in any rule, it automatically becomes an enriched field.
- Enriched fields are already synced to end-user devices. However, if you select a non-enriched field as a filter condition, the data might take up to 24 hours to sync across all devices.
- Besides the default enriched values, you can select up to 15 non-enriched fields.
Select Next.

What to do next

For the next step, see Define alert criteria.

Keywords event rule filtersselect filtersevent filteringconditional filtering

62 lines · 2.7 KB Wrap lines

---
title: Select event rule filters
description: Configure event rule filters to target specific devices and users by operating system, location, department, or custom conditions.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/it-operations-management/digital-end-user-experience-dex/event-rule-select-filters.html
release: brazil
product: Digital End-User Experience \(DEX\)
classification: digital-end-user-experience-dex
topic_type: task
last_updated: "2026-10-23"
reading_time_minutes: 1
keywords: [event rule filters, select filters, event filtering, conditional filtering]
breadcrumb: [Creating an event rule, Managing alert rules, Configure, Digital End-User Experience, IT Operations Management]
---

# Select event rule filters

Configure event rule filters to target specific devices and users by operating system, location, department, or custom conditions.

## Before you begin

Confirm that the DEX plugin \(sn\_dex\) is installed.

Role required: sn\_dex.admin

## Procedure

1.  In the primary navigation pane, select the DEX Administration icon \(\[Omitted image "icon-administration.png"\] Alt text:\).

2.  Select **Configure** on the Alert rules card.

    The list of alert rules appears.

3.  Select **Create new rule** &gt; **Event rule**.

    A new tab opens for the Create metric rule window, with the **Select filters** option preselected in the navigation pane.

4.  Select an operating system under **Select OS type**.

5.  Select the **Applicable for Non-persistent VDIs** toggle switch to apply this event rule to all the non-persistent virtual desktop infrastructures \(VDIs\).

    **Note:** When this toggle switch is on, only the **Location** option is available in the **Apply filtering for devices** field.

6.  Apply conditional filtering for a device or a user.

    The predefined filtering choices are Device and User.

    To add more filters, select **+ New condition set**.

    **Note:**

    -   Administrators can filter by selecting any available column from the Device \(`cmdb_ci_computer`\) or User \(`sys_user`\) tables. After a column is used as a filtering condition in any rule, it automatically becomes an enriched field.
    -   Enriched fields are already synced to end-user devices. However, if you select a non-enriched field as a filter condition, the data might take up to 24 hours to sync across all devices.
    -   Besides the default enriched values, you can select up to 15 non-enriched fields.
7.  Select **Next**.


## What to do next

For the next step, see [Define alert criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/digital-end-user-experience-dex/define-alert-criteria-event.md).