---
sourceDocument: Australia IT Service Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/it-service-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Service Management

ft:clusterId :

    - itsm

bundleId :

    - itsm

workflow :

    - Technology


---

# New DEX event form

# New DEX event form {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The New record form for DEX event monitoring enables you to add events to monitor.
{#new-dex-event-form__table_lhm_x42_j3c__entry__2}

| Field | Description |
|-|-|
| Name | Assigns the event a name, for example "Application crash." |
| OS Type | Selects the operating system for which the event is configured: * Windows * macOS {#new-dex-event-form__ul_i5l_s52_j3c} |
| Query Type | Selects a message pattern used to identify the event in the log: * Contains (Substring) is used for plain-text matching. * Regex (Pattern Matching) is used for regular expression matching. {#new-dex-event-form__ul_lpk_j52_j3c} |
| Active | Selects to activate or deselects to make the event inactive. |
| Application | Defaults to Application and Device Health, which owns the record. |
| Event message | Identifies the message for which the event rule searches to trigger an alert. This field is optional on Windows devices, and required on macOS devices. |
| Domain | Defaults to global. The record is visible across all domains. |
| Log level | Selects the severity level of the log event being monitored, such as Debug, Error, Fault, Info, or Warning. |
| macOS Category | Selects the logging category associated with the event, used to narrow down log sources. This field only appears for the events on macOS devices. This filed is optional. Adding a category could improve the performance and accuracy. |
| macOS Process | Selects a specific process that generates the event (for example, kernel or loginwindow). This field only appears for the events on macOS devices. This field is optional. Adding a category could improve the performance and accuracy. |
| macOS Subsystem | Selects a subsystem identifier (typically in reverse-domain notation, such as com.apple.Authorization) used to filter logs. This field only appears for the events on macOS devices. This filed is optional. |
| Windows Event ID(s) | Assigns a numeric ID used to identify the event in the Windows Event Log. This field only appears for the events on Windows devices. This filed is required. |
| Windows Log Source | Identifies the source where the event is recorded, such as Application, System, or Security. This field only appears for the events on Windows devices. This filed is required. |
[Table 1. Event Log Monitoring Config - New Record]

{#new-dex-event-form__table_lhm_x42_j3c}