Event management workflow

High-level workflow of event management in ServiceNow is described in the following list:

• Events from other monitoring tools that are integrated and fed into ServiceNow are stored in the event table, which is the em_event table first.
• Events are then processed for appropriate escalation by referring to the CMDB. For example, some of the events raised by critical business service and associated infrastructure might be resolved as a critical event and they follow the appropriate escalation rules that are configured.
• Unintended events are filtered out at the next state.
• Alert tables are referenced next for taking appropriate actions against the raised and processed events.
• During events processing the correlation is done this point by either overwriting or preventing recursion alerts.
• Appropriate remediation tasks are created at the next state. At places where automated self-healing solutions are in place, orchestration tasks kick in according to the configured parameters.
• Tasks and remediation related activities utilize the task and the remediation table.

Source : wiki.servicenow.com