You can now extract fields from the email alerts and map them to Freshservice. You can subsequently create more powerful alert rules for your email integrations.

Let's take an example to help you get started. 

Scenario: Assigning "resource" from the email body to the Freshservice alert field

Let’s assume that you are sending the following email alert to Freshservice.

Sample email:

For instance, you want to get the resource field from the email body and assign it to Freshservice alert resource field. Let's break this down step by step.

1. Go to the map alert fields section. and click on add a new mapping

2. For our example, select "body" as the email source.

3. Enter the following expression in the matched expression field to extract the resource field from the given email body.


NOTE: The matched expression field accepts any valid Regular Expression as input. Depending upon the expression entered, you will be able to see matchgroups under the values field.

In this example, the system will look for the keyword "Resource" and extract any values present after ":" and before the newline character (↲).

4. Choose matchgroup1 under the values dropdown to assign the matched value within the brackets of the regular expression. 

In this example, it is as-w12-fat.

5. Finally, select Resource from the alert fields dropdown.

6. Click on Save. 

You have successfully extracted the Resource field from the email body and mapped it to the Resource field in Freshservice Alerts.

Similarly, to get Severity from the email body.

1. Follow steps 1-4 and change the regular expression to Severity:\s*(.*) instead.

2. Select Severity from the alert field's drop-down

3. Additionally, odify the severity mapping to match the severity values you expect to be present in the email. In this example, you will add the keyword "High" mapped against the critical severity level. Therefore, whenever the email contains "Severity" as "High", the corresponding freshservice alert will have Critical Severity.

4. Click on Save.

You can use regular expressions to extract any part of your email (e.g., Email subject)  to map it to one of the freshservice alert fields. 

For instance, 

  • To get resource name for a subject like 

Alert: CPU utilization is high on ec2-123-machine

Where the resource name is ec2-123-machine

You can use the expression


  • To get node from an email body like
    Device:eu-north [node:] Status:Not Responding Message:(Server not responding) Error code: 500

Where the node value is

You can use the expression 



You can use any online tool available for free to validate your regular expressions and get more information about them. Some of them are listed below:

For more assistance, contact