Express List in the Service Operations Workspace for ITOM

---
title: Express List in the Service Operations Workspace for ITOM
description: Express List helps you identify health issues across the datacenter on the Service Operations Workspace. It provides quick information on alerts so you can monitor systems and services,​ resolve alerts, evaluate the alert impact,​ track issues, and report incidents more efficiently.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/event-management/express-list.html
release: australia
product: Event Management
classification: event-management
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 3
breadcrumb: [Event Management, ITOM AIOps, IT Operations Management]
---

# Express List in the Service Operations Workspace for ITOM

Express List helps you identify health issues across the datacenter on the Service Operations Workspace. It provides quick information on alerts so you can monitor systems and services,​ resolve alerts, evaluate the alert impact,​ track issues, and report incidents more efficiently.

\[Omitted video\] Description: Service Operations Workspace for ITOM \| Identify health issues with Event Management

The Express List pane sortable alert list reduces the number of clicks necessary to access alert information. Selecting the check box of an alert opens a preview panel where you can view data that helps for prioritization, impact realization, and root cause analysis. You can easily modify the Express List pane to narrow down the display. Use the provided fields list to display additional alert information and to filter out or show matching alerts. You can also modify the displayed time range.

**Note:**

Exporting alerts is not supported from the Express List. To export alerts, open the list view in Service Operations Workspace.

The following image shows a sample Express List pane.\[Omitted image "express-list-main-page.png"\] Alt text: Express List display

## Express List benefits

The Express List pane enables operators to more efficiently perform the following actions:

-   **Monitoring systems or application services**. Monitoring the performance and capability of computer systems to see any discrepancies​.
-   **Resolving alerts**. Working on discrepancies to troubleshoot issues and promote the efficient functioning of IT infrastructure.​
-   **Tracking issues**. Tracking and documenting defects and resolutions in detail and reporting incidents.
-   **Reporting incidents**. Escalating complex issues to management, other IT resources, third parties or vendors​.

## Alert information displayed in the Express List preview panel

The Express List preview panel displays additional alert information on the Express List pane. This information enables you to conduct an assessment that helps in resolving incidents without having to open multiple alert forms.

The **Info** tab on the preview panel displays the following information for a selected alert:

-   Alert number \(link\)
-   Status
-   Duration
-   Configuration items \(with links\)
-   Metric name
-   Node
-   Resource
-   Source
-   Assigned to
-   Assignment group
-   Last Updated
-   Impacted services

    For more information, see [View data on impacted services on the preview panel in Express List](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/el-impacted-services-data.md).

-   Additional info
-   Custom field

You can view additional alert information by selecting any of the linked items.

The **Alerts in group** tab on the preview panel displays alert information for a selected alert group. Information for each alert is displayed in a tile with additional options for each alert in the group.

Each tile displays the following alert information:

-   Alert number \(link\)
-   Status
-   Severity
-   Configuration items
-   Duration
-   Metric name

## Viewing alerts: Essential and Extended modes

You can view alerts in two modes:

-   **Essential** mode displays primary and single alerts only. Expand an alert group to view its secondary alerts.
-   **Extended** mode displays all alert types, including secondary alerts.

**Note:** You can switch between **Essential** and **Extended** modes without entering search text.

## Customizing the alert display time range

You can determine the time range of the displayed alerts. The default time range is the last 24 hours. The list continues to update with new alerts until you select the pause icon \(\[Omitted image "pause-el.png"\] Alt text: Pause icon.\). Selecting the current range setting in the upper right displays a dialog box with date and time range options:

-   All time - The last 90 days
-   Last 24 hours
-   Last 2 days
-   Last week
-   Last 12 hours
-   Last hour
-   Last 15 minutes
-   Custom - Enables you to select a date and time range from the pop-up calendar.

The **Default Time Range** field is introduced on the Express List view in the following versions:

-   Service Operations Workspace Express List 26.6.1
-   Service Operations Workspace Express List App 26.4.0
-   Service Operations Workspace ITOM Apps 26.9.0

Administrators can configure the default time range for a predefined Express List view by using the **Default Time Range** field. The default value is **Last 24 hours**.

The **evt\_mgmt.express\_list.all\_time\_days** system property controls the number of days included in the **All time** range. It does not affect the default time range.

**Related topics**  


[Roles used by Express List](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/roles-used-by-express-list.md)