Alert links in network traffic-based alert groups

concept brazil Updated Sep 10, 2026 1 min read el-network-traffic-based-link-view.md

View the connections between alerts in network traffic-based alert groups in Express List by using Link View. Network traffic-based alert groups are created by analyzing network traffic connections between processes across hosts.

Service candidates identified by ML Service Mapping, group alerts based on network traffic connections between processes. Link View shows a contextual view of network incidents based on these groups of directly connected processes. Service candidates are potential collections of processes within your IT environment that are identified based on their network connections and interactions.

[Omitted image "el-link-view-network-traffic.png"] Alt text: A map with seven nodes with links between the network traffic-based alerts.

In this sample Link View of a network traffic-based alert group, the dashed lines indicate that there are connected processes running on the CIs. Attributes linked by a solid line share one or more alerts.

View links between alerts in a group in Express List

32 lines · 2.2 KB Wrap lines

---
title: Alert links in network traffic-based alert groups
description: View the connections between alerts in network traffic-based alert groups in Express List by using Link View. Network traffic-based alert groups are created by analyzing network traffic connections between processes across hosts.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/it-operations-management/event-management/el-network-traffic-based-link-view.html
release: brazil
product: Event Management
classification: event-management
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Viewing links between alerts in alert groups, Working with alert groups in Express List, Express List, Event Management, ITOM AIOps, IT Operations Management]
---

# Alert links in network traffic-based alert groups

View the connections between alerts in network traffic-based alert groups in Express List by using Link View. Network traffic-based alert groups are created by analyzing network traffic connections between processes across hosts.

Service candidates identified by ML Service Mapping, group alerts based on network traffic connections between processes. Link View shows a contextual view of network incidents based on these groups of directly connected processes. Service candidates are potential collections of processes within your IT environment that are identified based on their network connections and interactions.

\[Omitted image "el-link-view-network-traffic.png"\] Alt text: A map with seven nodes with links between the network traffic-based alerts.

In this sample Link View of a network traffic-based alert group, the dashed lines indicate that there are connected processes running on the CIs. Attributes linked by a solid line share one or more alerts.

**Related topics**  


[Viewing links between alerts in alert groups in Express List](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/event-management/el-link-view.md)

[View links between alerts in a group in Express List](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-operations-management/event-management/view-relationships-between-alerts-in-groups.md)