Identifying the source of an email sent from ServiceNowDescription<!-- div.margin { padding: 10px 40px 40px 30px; } table.tocTable { border: 1px solid; border-color: #e0e0e0; background-color: #fff; } .title { color: #d1232b; font-weight: normal; font-size: 28px; } h1 { color: #d1232b; font-weight: normal; font-size: 21px; margin-bottom: 5px; border-bottom-width: 2px; border-bottom-style: solid; border-bottom-color: #cccccc; } h2 { color: #646464; font-weight: bold; font-size: 18px; } h3 { color: #000000; font-weight: bold; font-size: 16px; } h4 { color: #666666; font-weight: bold; font-size: 15px; } h5 { color: #000000; font-weight: bold; font-size: 13px; } h6 { color: #000000; font-weight: bold; font-size:14px; } ul, ol { margin-left: 0; list-style-position: outside; } --> There maybe times when you see an email in the "Sent" Mailbox on your instance but you don't know where it originated from. Following the procedure given below will help in such a case. ResolutionOpen the sent sys_email record. Scroll down to the 'Headers' field. Look for "X-ServiceNow-Source:". If the email originated from a Notification, it will show "Notification-<SYS_ID_OF_NOTIFICATION>". If the email originated from the Email Client, it will show "EmailClient".