Exploring chronological data on the alerts in an alert group in Express List

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Visualize the chronological sequence of events within an alert group in Express List using the Timeline view. This feature provides a comprehensive overview of when the alerts occurred, their severity changes, and other pertinent data for efficient triage and Mean Time to Resolution (MTTR).

    In Timeline view, each alert is represented by a bar, enabling you to quickly discern the order of occurrence, severity transitions, and closure status. The timeline begins with the creation of the first alert and extends to the present moment.

    Figure 1. Sample timeline view
    Sample timeline view in Express List.

    Standard severity colors are used in the bars, with gray segments indicating periods before alert creation or after its closure. Hovering over a severity bar reveals a tooltip with key alert details.

    Table 1. Severity range by color in Timeline view
    Color Severity
    Red used to represent Critical severity in the alert severity bar. Critical
    Orange used to represent Major severity in the alert severity bar. Major
    Yellow used to represent Minor severity in the alert severity bar. Minor
    Blue used to represent Warning severity in the alert severity bar. Warning
    Green used to represent OK in the alert severity bar. OK

    The title of the Timeline view for an alert group summarizes the group's description, number, state, severity, and grouping type, derived from the primary alert. Detailed information including alert number, state, severity, a brief description, and associated Configuration Item (CI) or node, when available, is displayed for each alert within the group.