Alert group types Alerts are correlated, or grouped, either automatically or manually into (R)ule-based, (A)utomated, (M)anual, or (C)MDB alert groups. Grouping alerts enables you to narrow down problems by focusing on the primary alerts in the correlated group. Grouping alerts for the ServiceNow ITOM Event Management and Operational Intelligence applications. When evaluating incoming alerts to form alert groups, the types of group that alerts might potentially belong to, are considered in the following order. After an alert becomes part of a group, it is not available for any other group. Rule-based Manual Automated CMDB You can view all alert groups by navigating to Event Management > Alert Console. The icon in the Group column denotes the alert group type. Alerts that do not have an entry in the Group column are not correlated with any group. At any given time, an alert can only belong to a single alert group. Table 1. Alert group types Type Icon Description More information Rule-based R Related alerts that have been grouped according to compliance with alert correlation rules. Alert correlation rules are used to group alerts that are related. Create an alert correlation rule Automated A Groups that are aggregated automatically by alert aggregation and RCA. A virtual alert is added to the group as the primary alert of the group. Automated alert groups Manual M Alerts that have been manually grouped. Create a manual alert group CMDB C Based on CI relationships in the CMDB, for CIs without historical data that could have been used to group alerts. CMDB alert groups Double-click the Group column for an alert group to open its Grouped Alerts dialog box, where you can: Display all alerts in the group. Provide feedback about the usefulness of the group. Manually add or remove alerts from the group. View timeline for alert groupsA timeline format that displays alerts and alert groups that correspond to the alerts and alert groups currently visible in the list view in the alerts console.Add alert to an alert groupAfter viewing the individual alerts in an alert group such as an automated alert group, you might conclude that there is another alert that should be added to the group. You can manually add an alert to an existing alert group so the group is more complete and useful in troubleshooting an incident.Provide feedback for an alert groupAs you view the details of an automated or CMDB alert group in the Alert Console, you can provide feedback about the accuracy and usefulness of the group. This feedback can help future analysis, and over time, accumulated feedback continues to improve the accuracy of alert aggregation.Edit feedback for an automated alert groupModify which manual additions and removals of alerts are automatically applied to newly formed automated alert groups.Create a manual alert groupAfter you manually create a manual alert group, you can continue and manually add specific alerts to the group. The resultant manual alert group can contain many alerts and is useful in troubleshooting an incident.