Unmatched Security Operations email events
concept brazil Updated Sep 10, 2026 1 min read umatched-emails.md
Email events that do not match an email parser have their "matched" flag unset. You can view these email event records from the Unmatched Emails list, to reveal external detection systems whose emails are not yet parsed.
As you create email parsers, you can attempt to reprocess the email event (from the form or the list) to validate a new email parser.
- View and reprocess unmatched Security Operations emails
You can review Unmatched Emails for discontinued filters or as candidates for a new filter to maintain or improve the rate at which you catch email threats.
Parent Topic:Security Operations email processing
24 lines · 1.5 KB
--- title: Unmatched Security Operations email events description: Email events that do not match an email parser have their "matched" flag unset. You can view these email event records from the Unmatched Emails list, to reveal external detection systems whose emails are not yet parsed. locale: en-US canonical_url: https://www.servicenow.com/docs/r/security-management/umatched-emails.html release: brazil topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Security Operations email processing, Security Operations common functionality, Security Operations] --- # Unmatched Security Operations email events Email events that do not match an email parser have their "matched" flag unset. You can view these email event records from the Unmatched Emails list, to reveal external detection systems whose emails are not yet parsed. As you create email parsers, you can attempt to reprocess the email event \(from the form or the list\) to validate a new email parser. - **[View and reprocess unmatched Security Operations emails](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/viewing-reprocessing-unmatched-emails.md)** You can review Unmatched Emails for discontinued filters or as candidates for a new filter to maintain or improve the rate at which you catch email threats. **Parent Topic:**[Security Operations email processing](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/email-processing.md)
| title | Unmatched Security Operations email events |
| description | Email events that do not match an email parser have their "matched" flag unset. You can view these email event records from the Unmatched Emails list, to reveal external detection systems whose emails are not yet parsed. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/security-management/umatched-emails.html |
| release | brazil |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Security Operations email processingSecurity Operations common functionalitySecurity Operations |