ServiceNow CIS-EM free question 2 / 10 · Domain 2: Architecture and Discovery
In the event field table, what does the Source field hold?
- The time that the event occurred in the source system
- The monitoring software that generated the event, such as SCOM
- The reason the event was generated, such as a server stack trace
- The identifier that ties several events to the same alert
Show the answer and explanation
Answer: B
Why this is correct
The Source field (em_event.source) holds the event monitoring software that generated the event, such as SolarWinds or SCOM.
Why the other options are wrong
"The identifier that ties several events to the same alert" … This describes a different field in the event field table, not the one this question asks about.
"The reason the event was generated, such as a server stack trace" … This describes a different field in the event field table, not the one this question asks about.
"The time that the event occurred in the source system" … This describes a different field in the event field table, not the one this question asks about.
Key point
Source names the monitoring product. It is one of the values that identify where an event came from, so a connector or script must fill it consistently for every event it sends.
Go to the ServiceNow CIS-EM practice app (10 free questions; purchase unlocks all questions)