Use event input information
Summarize
Summary of Use event input information
The Event Input pane in the Event Rule designer is a key feature for ServiceNow customers to reference and utilize event data when configuring event rules. It provides structured event information that can be dragged into alert fields to customize alert content effectively. This pane appears in all Event Rule designer sections except the Event Rule Info section, serving mostly as a read-only reference except in the Transform and compose alert output section where it is editable.
Show less
Key Features
- Event Input Pane Sections: The pane includes four sections—Event Additional Info, Expressions, Event Raw Info, and the ability to define custom alert tags for specific customization needs.
- Edit Modes:
- Standard Edit Mode: Allows marking and transforming text by selecting field names but does not allow text editing or undo.
- Regex Edit Mode: Enables direct text editing in the work area with regular expression syntax for flexible field creation and transformation, though undo is not available. Reset returns the field to its original value.
- Event Additional Info: Displays default and custom fields used in alerts; these fields can be dragged into the alert configuration work area.
- Expressions: Allows creation of new fields by transforming event raw or additional info data, facilitating more granular customization of alert content.
- Event Raw Info: Contains all fields from the Event form and supports creating new expressions by selecting text to define new field values.
- Field Control: Customers can manage field visibility using the exclusion list ([emeventruleblacklist] table) and order fields using the emeventruleorder form to tailor the Event Input pane's appearance.
Practical Use for ServiceNow Customers
This functionality empowers customers to customize alerts precisely by using event data fields and expressions. By dragging and transforming event input information, customers can create meaningful alerts that suit their operational needs. The regex edit mode supports advanced text manipulation, enabling complex field definitions.
Managing field visibility and order allows customers to streamline their configuration experience by focusing only on relevant data fields.
Additional Considerations
- Ensure variables in regex expressions are created and used in sequential order to maintain proper input processing.
- The Event Input pane is read-only in most sections except where alert output is composed and transformed.
- Accessibility settings may limit editing modes available.
The Event Input pane that is included in the steps to create an event rule provides a reference to the information that you can use when configuring an event rule.
In the Transform and compose alert output pane, you can also drag the information into the required fields to customize alert content. The fields in the right-hand pane appear as a reference to which fields, expressions, and their values are available when working in the Event Rule designer. The fields that display in the Transform and compose alert output left-hand workarea become the fields in the generated alert form. In addition, you can define alert tags that are specific for customization.
General components and navigation
The Event Input pane consists of these sections:
- Event Additional Info
- Expressions
- Event Raw Info
The Event Input pane displays in all Event Rule designer sections, except for the Event Rule Info section. The fields in the right-pane can be modified only in the Transform and compose alert output section. In all the other sections, the Event Input pane is read-only and available for reference purposes.
is selected in System Settings, standard edit mode is not available 
.Edit modes
| Mode | Description |
|---|---|
Standard edit mode  |
Text selected in the left-hand workarea cannot be edited. Undo is not available. In this mode, you can only mark the text or values and transform it by selecting a field name. |
Regex edit mode |
Edit text in the left-hand workarea by selecting it, as required. After you
have edited the text, you cannot go back to the standard mode.
Undo is not available. However,
Reset is available, returning the field to its original
value. You can compose text using regular expression (regex) format conventions, for
example, type (.*) to create a field name. You cannot use field values like: type
"$" to include the value of a field and specify the name of the field in parentheses
{}. You can include special characters in a field by "escaping" them, that is, by prefixing the character with a "\". For example, to include a "\" in your text, enter "\\". |
Event additional info
The Event additional info section displays default event form fields, plus fields that were created to display in alerts and that are added to the Additional information section of the alert.
When configuring text in the fields in the left-hand workarea, you can drag field names and/or their value from this section into the fields.Expressions
The Expressions section is available only if an additional information field was created. You can create expressions from event raw data or from additional information data.
- Click in a field in the Event Input pane to perform transformation actions.
- Create an expression by transforming information and associating it with a field name.
Either select a field name from the suggested list, or create a field name, as
required.
- Click in a field in the Event Input pane. In the left-hand workarea, select the required information.
Create expressions by transforming information and associating it with a field name. Select a field name from the suggested list, or you can create a field name, as required.
Event raw info
The Event raw info section is always available. Its contents are the fields from the Event form.
To transform text, click a field in the right-panel to open it in the work area on the left-panel, in the Mark Expressions section. You can select text in the Mark Expressions section where the selected text becomes the value of a newly created field. Name the new field. This new field is added to the Expressions section.- Use the exclusion list [em_event_rule_black_list] table to hide fields from the right-pane.
- Use the em_event_rule_order form to order the position of each field.
- Fields that are not in the exclusion list and also not part of the em_event_rule_order table, still appear in the event rule designer, in the right-panel and in the Transform and Compose Alert Output tab.