---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Unmatched Security Operations email events

# Unmatched Security Operations email
events {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Email events that do not match an email parser have their "matched" flag unset. You can
view these email event records from the Unmatched Emails list, to
reveal external detection systems whose emails are not yet parsed.

As you create email parsers, you can attempt to reprocess the email event (from the form or the
list) to validate a new email parser.
* **[View and reprocess unmatched Security Operations emails](https://servicenow-prod.fluidtopics.net/hwGKdPVj8eUwnk6V6vcg8g)**   
  You can review Unmatched Emails for discontinued filters or as candidates for a new filter to maintain or improve the rate at which you catch email threats.