List of predefined tag-based alert grouping definitions
A list of the predefined alert clustering definitions provided with the Tag Based Alert Clustering Engine application.
|
Name |
Description |
Order |
|---|---|---|
|
Group alerts from the same Application |
Group all alerts from the same application, created in the last 10 minutes. In new systems, this definition is activated by default. |
9010 |
|
Group all alerts from the same IP address |
Group all alerts from the same IP address, created in the last 10 minutes. |
9020 |
|
Group all alerts from the same Namespace |
Group all alerts from the same namespace, created in the last 10 minutes. In new systems, this definition is activated by default. |
9030 |
|
Group all alerts from the same Subnet |
Group all alerts from the same subnet, created in the last 10 minutes. In new systems, this definition is activated by default. |
9040 |
|
Group alerts from the same CI class and Location |
Group all alerts from the same CI class and location, created in the last 10 minutes. |
9050 |
|
Group alerts from the same Application and Environment |
Group all alerts from the same application and environment, created in the last 10 minutes. |
9060 |
|
Group all alerts from a similar Node |
Group all alerts from a similar node name, created in the last 10 minutes. |
9070 |
|
Group alerts from the same Location and Assignment group |
Group all alerts from the same location and assignment group, created in the last 10 minutes. |
9080 |
|
Group alerts from the same Region and Metric |
Group all alerts from the same region and metric, created in the last 10 minutes. |
9090 |
|
Group alerts from the same CI class and Metric |
Group all alerts from the same CI class and metric, created in the last 10 minutes. |
9100 |
|
Group alerts from the same Node and Metric |
Group all alerts from the same node and metric, created in the last 10 minutes. |
9110 |
|
Group alerts from the same Assignment group and Class |
Group all alerts from the same assignment group and class, created in the last 10 minutes. |
9120 |
|
Group alerts from the same Type, Metric and Source |
Group all alerts from the same type, metric, and source instance, created in the last 10 minutes. |
9130 |
|
Group alerts from the same CI |
Group all alerts from the same CI, created in the last 10 minutes. Important: When this rule is active, CMDB grouping must be disabled. |
9140 |
|
Group alerts from the same Node |
Group all alerts from the same node, created in the last 10 minutes. In new systems, this rule is activated by default. |
9150 |
--- title: List of predefined tag-based alert grouping definitions description: A list of the predefined alert clustering definitions provided with the Tag Based Alert Clustering Engine application. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/event-management/alert-clustering-predefined-definition-list.html release: australia product: Event Management classification: event-management topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 2 breadcrumb: [Reference, Event Management, ITOM AIOps, IT Operations Management] --- # List of predefined tag-based alert grouping definitions A list of the predefined alert clustering definitions provided with the Tag Based Alert Clustering Engine application. <table id="table_ufq_13c_b1c"><thead><tr><th> Name </th><th> Description </th><th> Order </th></tr></thead><tbody><tr><td> Group alerts from the same Application </td><td> Group all alerts from the same application, created in the last 10 minutes. In new systems, this definition is activated by default. </td><td> 9010 </td></tr><tr><td> Group all alerts from the same IP address </td><td> Group all alerts from the same IP address, created in the last 10 minutes. </td><td> 9020 </td></tr><tr><td> Group all alerts from the same Namespace </td><td> Group all alerts from the same namespace, created in the last 10 minutes. In new systems, this definition is activated by default. </td><td> 9030 </td></tr><tr><td> Group all alerts from the same Subnet </td><td> Group all alerts from the same subnet, created in the last 10 minutes. In new systems, this definition is activated by default. </td><td> 9040 </td></tr><tr><td> Group alerts from the same CI class and Location </td><td> Group all alerts from the same CI class and location, created in the last 10 minutes. </td><td> 9050 </td></tr><tr><td> Group alerts from the same Application and Environment </td><td> Group all alerts from the same application and environment, created in the last 10 minutes. </td><td> 9060 </td></tr><tr><td> Group all alerts from a similar Node </td><td> Group all alerts from a similar node name, created in the last 10 minutes. </td><td> 9070 </td></tr><tr><td> Group alerts from the same Location and Assignment group </td><td> Group all alerts from the same location and assignment group, created in the last 10 minutes. </td><td> 9080 </td></tr><tr><td> Group alerts from the same Region and Metric </td><td> Group all alerts from the same region and metric, created in the last 10 minutes. </td><td> 9090 </td></tr><tr><td> Group alerts from the same CI class and Metric </td><td> Group all alerts from the same CI class and metric, created in the last 10 minutes. </td><td> 9100 </td></tr><tr><td> Group alerts from the same Node and Metric </td><td> Group all alerts from the same node and metric, created in the last 10 minutes. </td><td> 9110 </td></tr><tr><td> Group alerts from the same Assignment group and Class </td><td> Group all alerts from the same assignment group and class, created in the last 10 minutes. </td><td> 9120 </td></tr><tr><td> Group alerts from the same Type, Metric and Source </td><td> Group all alerts from the same type, metric, and source instance, created in the last 10 minutes. </td><td> 9130 </td></tr><tr><td> Group alerts from the same CI </td><td> Group all alerts from the same CI, created in the last 10 minutes. **Important:** When this rule is active, CMDB grouping must be disabled. </td><td> 9140 </td></tr><tr><td> Group alerts from the same Node </td><td> Group all alerts from the same node, created in the last 10 minutes. In new systems, this rule is activated by default. </td><td> 9150 </td></tr></tbody> </table>**Parent Topic:**[Event Management reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/event-management-reference.md)
| title | List of predefined tag-based alert grouping definitions |
| description | A list of the predefined alert clustering definitions provided with the Tag Based Alert Clustering Engine application. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/it-operations-management/event-management/alert-clustering-predefined-definition-list.html |
| release | australia |
| product | Event Management |
| classification | event-management |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| breadcrumb | ReferenceEvent ManagementITOM AIOpsIT Operations Management |