Event field mapping configuration

concept brazil Updated Sep 10, 2026 1 min read c_EMEventFieldMapping.md
Raw file servicenow.com

Use Event field mappings rules to map values from specific fields to values in other fields.

Event Management stores event field mappings in the Event Field Mapping [em_mapping_rule] table. The mappings apply after event rule processing and prior to alert generation. The mapping values from the Event Mapping Pair [em_mapping_pair] table apply to the alert. The original event severity remains unchanged.

For example, if events use the field org_severity with values Low, Medium, High and you want the alert Severity to use these values, create a mapping rule from org_severity to Severity:

Original org_severity value Map to alert Severity value
Low Warning
Medium Major
High Critical

Default event field mappings

Event Management provides default event field mappings for commonly used system monitoring tools. The Transform Value Pairs from event field mappings format the incoming event data for Event Management.

You can view the default event field mappings and mapping pairs by navigating to Event Management > Rules > Event Field Mappings and double-clicking Name.

  • Create event field mappings
    Use event field mappings to map values from specific event fields to values in other fields to provide more comprehensive information in an alert. Use team-based integrations in event rules to make sure that connector ownership and execution of rules give precedence to global rules. Teams can maintain consistency and hierarchy while offering flexibility and customization options.

Parent Topic:Event Management

Search documentation
Search document titles and file paths on the brazil branch