---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Create an incident from an alert with ServiceNow Otto

# Create an incident from an alert with ServiceNow Otto in Express List {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Create an incident with a human-readable, AI-generated description from the Express List pane by using AI.

## Before you begin

Note:  
Currently, ServiceNow Otto for ITOM only supports tag-based, CMDB, Log Analytics, Mixed, Automated, and Network Traffic-based alert groups. For all other alert group types, it only analyzes the parent alert.

Role required: evt_mgmt_operator, evt_mgmt_admin

## Procedure

1. Navigate to WorkspacesService Operations Workspace.
2. From the navigation bar, select the Express list icon ![]().
3. Create an incident from a selected alert.
   1. In the Express List pane, select the alert.  
      Note:  
      To display the individual alerts inside a group, select the chevron icon (![Chevron icon.]()) at the beginning of the alert group row.
   2. Select the Alert actions drop-down list.  
      ![Alert actions drop down arrow]()
   3. Under Response actions, select Create Incident with ServiceNow Otto.

   {#create-incident-now-assist-el__substeps_wj2_zwk_bcc}  
   An incident with a human-readable, AI-generated description is created from the selected alert and a confirmation message is displayed.
{#create-incident-now-assist-el__steps_vk5_nm4_cdc}

*[\>]: and then