---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Create an alert clustering definition

# Create an alert clustering definition {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Define alert clustering conditions to trigger one or more alert clustering tags, which help create alert groups from fewer alerts. Creating alert groups from fewer alerts reduces noise, making it easier to identify critical
incidents, prioritize responses, and manage issues effectively.

## Before you begin

Role required: evt_mgmt_admin

## About this task

To create a tag definition, users need to use a filter to define which alerts the definition will apply to. They then define a grouping criteria by specifying which field values should be compared to create a group.  
Note:  
To group alerts using tag-based grouping, create a grouping automation in Service Operations Workspace. For more information, see [Create Group automation](https://www.servicenow.com/docs/OM3oKI7Rry_Wahava5K1Kw "Grouping automation helps you manage alerts more effectively by collecting similar alerts together. This makes it easier to see patterns, quickly identify issues, and respond efficiently. By organizing alerts in this way, you can reduce alert noise, identify root causes, and assign them to the appropriate teams.").

## Procedure

1. Navigate to AllEvent ManagementTag Based Alert Clustering EngineAlert Clustering Definitions.
2. Select New.
3. Configure the fields on the [Event Management tag based alert grouping definition form](https://www.servicenow.com/docs/q1kRJyBJDsXAllLcGVLhxw "The form for creating or modifying a tag based alert clustering definition displays detailed information about the definition.").
4. Select Save.  
   The definition appears in the Tag Based Alert Clustering Definitions table.

*[\>]: and then