Viewing links between alerts in rules-based alert groups

concept brazil Updated Sep 10, 2026 1 min read el-rule-based-link-view.md
Raw file servicenow.com

View the connections between alerts in a rules-based alert group in Express List by using Link View. Link View shows how the attributes of the alerts in the group are linked with each other.

When you've set alert rules and Event Management has generated an alert group based on these rules, Link View offers a visual representation of the relationships between the alerts. The colored tags represent Configuration Items (CIs) and other environment items in relation to the alerts.

[Omitted image "el-link-view-rules-based.png"] Alt text: Sample rules-based alert group in Link View.

Rules-based alert groups are comprised of a primary alert and one or more secondary alerts. The primary alert is generated directly and is represented in Link View as the Home node. Secondary alert nodes are connected to the Home node by a dashed line, indicating that they don't share the same alert, but are correlated using rule criteria. A solid line between nodes indicates that the connected nodes share the same alert or multiple alerts.

If an alert on a CI impacts a service in the Configuration Management Database (CMDB), Link View shows the impacted service. You can view it at a glance for quick triage. Hovering over a node displays a tooltip. The tooltip includes the tag name, type, number of alerts in which it appeared, and whether it is a primary or secondary alert.

Related topics

Viewing links between alerts in alert groups in Express List

View links between alerts in a group in Express List

Search documentation
Search document titles and file paths on the brazil branch