Express List in the Service Operations Workspace for ITOM

  • Release version: Australia
  • Updated June 10, 2026
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Express List in the Service Operations Workspace for ITOM

    The Express List feature in ServiceNow Event Management within the Service Operations Workspace provides a streamlined alert monitoring experience for IT Operations Management (ITOM). It offers a sortable pane displaying alerts to quickly identify health issues across data centers, helping operators monitor systems and services, resolve alerts, assess impact, track issues, and report incidents efficiently.

    Show full answer Show less

    Key Features

    • Sortable Alert List: Reduces clicks to access alert details and allows quick prioritization.
    • Preview Panel: Selecting an alert checkbox opens a panel showing detailed data such as alert number, status, duration, configuration items, metric names, assigned groups, and impacted services to aid root cause analysis and impact evaluation without opening multiple forms.
    • Customizable Display: Modify the Express List pane by filtering alerts, choosing displayed fields, and adjusting the time range of alerts shown.
    • Time Range Settings: Default display covers the last 24 hours, with configurable options including last 15 minutes, hour, 12 hours, day, week, 90 days, or a custom date/time range. Administrators can define default time ranges using system properties.
    • Alerts in Group Tab: Displays grouped alerts in tiles with key details and options for each alert.

    Key Outcomes

    • Efficient Monitoring: Quickly spot discrepancies in system or application service health.
    • Streamlined Alert Resolution: Access detailed alert information rapidly to prioritize and troubleshoot issues.
    • Comprehensive Issue Tracking: Document and track defects and resolutions for improved incident management.
    • Effective Incident Reporting: Escalate complex issues to appropriate teams or vendors with relevant alert data.

    Additional Notes

    Exporting alerts directly from the Express List is not supported; exporting requires opening the list view in the Service Operations Workspace.

    The ServiceNow Event Management Express List feature helps you identify health issues across the datacenter on the Service Operations Workspace. It provides a list of quick information on alerts so you can more efficiently monitor systems and services,​ resolve alerts, evaluate the alert impact,​ track issues, and report incidents.

    The Express List pane sortable alert list reduces the number of clicks necessary to access alert information. Selecting the check box of an alert opens a preview panel where you can view data that helps for prioritization, impact realization, and root cause analysis. You can easily modify the Express List pane to narrow down the display by using a provided fields list, displaying additional alert information, and filtering out or showing matching alerts. You can also modify the displayed time range.

    Note:

    Exporting alerts is not supported from the Express List. To export alerts, open the list view in Service Operations Workspace.

    The following image shows a sample Express List pane.Express List display

    Express List benefits

    The Express List pane enables operators to more efficiently perform the following actions:
    • Monitoring systems or application services. Monitoring the performance and capability of computer systems to see any discrepancies​.
    • Resolving alerts. Working on discrepancies to troubleshoot issues and promote the efficient functioning of IT infrastructure.​
    • Tracking issues. Tracking and documenting defects and resolutions in detail and reporting incidents.
    • Reporting incidents. Escalating complex issues to management, other IT resources, third parties or vendors​.

    Alert information displayed in the Express List preview panel

    The Express List preview panel displays additional alert information on the Express List pane. This information enables you to conduct an assessment that helps in resolving incidents without having to open multiple alert forms.

    The Info tab on the preview panel displays the following information for a selected alert:You can view additional alert information by selecting any of the linked items.

    The Alerts in group tab on the preview panel displays alert information for a selected alert group. Information for each alert is displayed in a tile with additional options for each alert in the group.

    Each tile displays the following alert information:
    • Alert number (link)
    • Status
    • Severity
    • Configuration items
    • Duration
    • Metric name

    Customizing the alert display time range

    You can determine the time range of the displayed alerts. The default time range is the last 24 hours. The list continues to update with new alerts until you select the pause icon (Pause icon.). Selecting the current range setting in the upper right displays a dialog box with date and time range options:
    • All time - The last 90 days
    • Last 24 hours
    • Last week
    • Last 12 hours
    • Last hour
    • Last 15 minutes
    • Custom - Enables you to select a date and time range from the pop-up calendar.
    The Default Time Range field is introduced on the Express List view in the following versions:
    • Service Operations Workspace Express List 26.6.1
    • Service Operations Workspace Express List App 26.4.0
    • Service Operations Workspace ITOM Apps 26.9.0

    Default time ranges can be defined by your administrator using the system property evt_mgmt.express_list.all_time_days. This property specify the time range (in days) of displayed alerts.