This site is scheduled for a small content update on Thursday, March 28th, between the hours of 8:00am and 12:00pm (noon) Pacific Time (Mar 28 15:00 – Feb 22 19:00 UTC). Access to this site may be slightly delayed during that time.

Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.
  • Madrid
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store

Create a security incident from an Event Management alert

Log in to subscribe to topics and get notified when content changes.

Create a security incident from an Event Management alert

When Event Management is activated, you can manually create security incidents from the Alert form.

Before you begin

The Event Management plugin (com.glideapp.itom.snac) requires a separate subscription and must be activated by ServiceNow personnel. This plugin includes demo data and activates related plugins if they are not already active. The Service Analytics plugin ( is activated automatically when Event Management is activated.

Role required: evt_mgmt_admin, evt_mgmt_operator, or evt_mgmt_user


  1. Navigate to Event Management > All Alerts.
  2. Click the alert Number.
  3. Click Create Security incident.
  4. Click Update.