Hi ServiceNow experts,
I am recently working on Alert correlation and Alert grouping. I am confused on how the alert grouping is performed and unable to find documentation on closed alerts
Alert 1 ->Initial event generation -> 2026-06-11 10:58:00
Alert 2 -> Initial event generation -> 2026-06-11 11:04:00
Alert 1 -> Closed at -> 2026-06-11 11:00:58
Alert 1 and Alert 2 have same node and same metric name . I would like to understand will alert 1 and alert 2 will be grouped together as alert 1 is closed just seconds before alert 2 is created.
#alertcorrelation # tag based clustering #event management
